Skip to content

Documentation Update: Yubikey udev #1280

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
MarcusPro7 opened this issue Mar 5, 2025 · 3 comments
Open

Documentation Update: Yubikey udev #1280

MarcusPro7 opened this issue Mar 5, 2025 · 3 comments
Labels
P2 Medium Priority

Comments

@MarcusPro7
Copy link

Describe the error/improvement to an existing document or image:

After the addition of pypi-yubikey_manager, libfido2, and pam_u2f, it is no longer necessary to create the udev rule or enable the security.webauth.u2f option. Firefox has this option enabled by default. Therefore, the only required steps are to add the "smartcard" bundle and start the pcscd.service.

Page for Revision: Yubikey Support

Environment:

Clear Linux OS version: 43080

Third-party tool/software: version 2.3.1 LudovicRousseau/PCSC@be1c2a6 Firefox v. 136

Command: swupd bundle-add smartcard, systemctl enable pcscd.service, reboot

Additional context This improvement streamlines the setup process for U2F functionality in Firefox, eliminating the need for additional manual configurations and ensuring better integration with the tools and services.

@MarcusPro7 MarcusPro7 added the P2 Medium Priority label Mar 5, 2025
Copy link

github-actions bot commented Mar 5, 2025

Welcome to Clear Linux* OS Docs. Thanks for submitting your first issue.

@bwarden
Copy link
Member

bwarden commented Mar 6, 2025

If I'm looking at things right, the pcscd service is socket-activated, so you shouldn't even have to enable it. I'm not sure what connects to that socket to trigger it though -- does Firefox do it when you go to a particular website?

You can do journalctl -u pcscd.\* -f to watch what happens.

@MarcusPro7
Copy link
Author

I did it because it's mentioned in the Archlinux Wiki (which is usually the most updated/detailed).
After running this command and launching Firefox in incognito mode while logging into my Google account, nothing happened.

At this point, should I disable the service?

$ journalctl -u pcscd.\* -f
mar 05 21:29:28 sal8 systemd[1]: Listening on pcscd.socket.
^Z
[2]+  Fermato                 journalctl -u pcscd.\* -f

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
P2 Medium Priority
Projects
None yet
Development

No branches or pull requests

2 participants