clear-linux-documentation icon indicating copy to clipboard operation
clear-linux-documentation copied to clipboard

Documentation Update: Yubikey udev

Open MarcusPro7 opened this issue 11 months ago • 3 comments

Describe the error/improvement to an existing document or image:

After the addition of pypi-yubikey_manager, libfido2, and pam_u2f, it is no longer necessary to create the udev rule or enable the security.webauth.u2f option. Firefox has this option enabled by default. Therefore, the only required steps are to add the "smartcard" bundle and start the pcscd.service.

Page for Revision: Yubikey Support

Environment:

Clear Linux OS version: 43080

Third-party tool/software: version 2.3.1 https://github.com/LudovicRousseau/PCSC/commit/be1c2a6532444cfa4a65065fe0b527fbd53033e8 Firefox v. 136

Command: swupd bundle-add smartcard, systemctl enable pcscd.service, reboot

Additional context This improvement streamlines the setup process for U2F functionality in Firefox, eliminating the need for additional manual configurations and ensuring better integration with the tools and services.

MarcusPro7 avatar Mar 05 '25 21:03 MarcusPro7

Welcome to Clear Linux* OS Docs. Thanks for submitting your first issue.

github-actions[bot] avatar Mar 05 '25 21:03 github-actions[bot]

If I'm looking at things right, the pcscd service is socket-activated, so you shouldn't even have to enable it. I'm not sure what connects to that socket to trigger it though -- does Firefox do it when you go to a particular website?

You can do journalctl -u pcscd.\* -f to watch what happens.

bwarden avatar Mar 06 '25 16:03 bwarden

I did it because it's mentioned in the Archlinux Wiki (which is usually the most updated/detailed). After running this command and launching Firefox in incognito mode while logging into my Google account, nothing happened.

At this point, should I disable the service?

$ journalctl -u pcscd.\* -f
mar 05 21:29:28 sal8 systemd[1]: Listening on pcscd.socket.
^Z
[2]+  Fermato                 journalctl -u pcscd.\* -f

MarcusPro7 avatar Mar 06 '25 18:03 MarcusPro7