Documentation Update: Yubikey udev
Describe the error/improvement to an existing document or image:
After the addition of pypi-yubikey_manager, libfido2, and pam_u2f, it is no longer necessary to create the udev rule or enable the security.webauth.u2f option. Firefox has this option enabled by default. Therefore, the only required steps are to add the "smartcard" bundle and start the pcscd.service.
Page for Revision: Yubikey Support
Environment:
Clear Linux OS version: 43080
Third-party tool/software: version 2.3.1 https://github.com/LudovicRousseau/PCSC/commit/be1c2a6532444cfa4a65065fe0b527fbd53033e8 Firefox v. 136
Command: swupd bundle-add smartcard, systemctl enable pcscd.service, reboot
Additional context This improvement streamlines the setup process for U2F functionality in Firefox, eliminating the need for additional manual configurations and ensuring better integration with the tools and services.
Welcome to Clear Linux* OS Docs. Thanks for submitting your first issue.
If I'm looking at things right, the pcscd service is socket-activated, so you shouldn't even have to enable it. I'm not sure what connects to that socket to trigger it though -- does Firefox do it when you go to a particular website?
You can do journalctl -u pcscd.\* -f to watch what happens.
I did it because it's mentioned in the Archlinux Wiki (which is usually the most updated/detailed). After running this command and launching Firefox in incognito mode while logging into my Google account, nothing happened.
At this point, should I disable the service?
$ journalctl -u pcscd.\* -f
mar 05 21:29:28 sal8 systemd[1]: Listening on pcscd.socket.
^Z
[2]+ Fermato journalctl -u pcscd.\* -f