A live buildroot based Linux distribution designed for managing secrets offline.

Go to file

Lance Vick cf88d7ba72 embed build details into build as splash screen		2020-07-16 19:15:03 -07:00
config	embed build details into build as splash screen	2020-07-16 19:15:03 -07:00
scripts	working usb, yubikeys, and some kernel hardening	2020-07-14 18:35:16 -07:00
Makefile	embed build details into build as splash screen	2020-07-16 19:15:03 -07:00
README.md	rename to airgap	2020-06-15 11:04:50 -07:00

README.md

Airgap

https://gitlab.com/pchq/airgap

About

A live buildroot based distribution designed for managing secrets offline.

Built for those of us that want to be -really- sure our most important secrets are managed in a clean environment with an "air gap" between us and the internet.

Use Cases

Generate GPG keychain
Store/Restore gpg keychain to security token such as a Yubikey or Nitrokey
Signing cryptocurrency transactions
Generate/backup BIP39 universal cryptocurrency wallet seed
Store/Restore BIP39 seed to a hardware wallet such as a Trezor or Ledger

Requirements

Software

docker 18+

Hardware

Any x86_64 laptop known to support Linux should work.
Ideally use a coreboot compatible machine with Heads for secure boot
Ensure any Wifi/Bluetooth/Audio devices are removed

Build

make all

Install

TBD

Development

Boot image in qemu

make vm