fosstodon.org is one of the many independent Mastodon servers you can use to participate in the fediverse.
Fosstodon is an invite only Mastodon instance that is open to those who are interested in technology; particularly free & open source software. If you wish to join, contact us for an invite.

Administered by:

Server stats:

10K
active users

üᾔʟ0¢кⅾ

- A recent dnf update broke authentication :/

is not prompting me for my YubiKey and password auth requires this to login. Root account is disabled, so single-user mode is inaccessible.

Is there any key combo that will force gdm to prompt me for my 2fa?

34, fwiw

@unl0ckd can you boot from a rescue and roll back the package that broke 2fa?

@nilix Thanks for the suggestion!

The built-in rescue (in grub) fails:

Cannot open access to console, the root account is locked.

I haven't had the time yet to try booting from a live image.

@unl0ckd Yeah no problem! You should be able to do a rollback by chrooting in from a live image.

@nilix This worked! 👏

Here's a note to my future self (or anyone that's run into this):

From Fedora 34 liveUSB

1. Unlock the btrfs boot volume using Files. This should be mounted at `/run/media/liveuser/fedora_localhost-live`

2. Elevate privileges to root using `su -`

3. As root, start a chroot to the system btrfs subvolume with `chroot /run/media/liveuser/fedora_localhost-live/@`

4. Remove the MFA configuration as performed above with `authselect select minimal`

@nilix Also, lesson learned: I'm creating a separate admin user for use in these situations 🤦‍♂️

@unl0ckd That's awesome! Glad you regained access to your system!