Secure cryptfs partition with a yubikey:
- install package yubikey-luks:
sudo apt install yubikey-luks
- copy enroll script to modify default settings (if necessary)
cp /usr/bin/yubikey-luks-enroll ./
- defaults are:
/dev/sda3
as device - second yubikey slot for the challenge