UBports Robot Logo UBports Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Groups
    • Search
    • Register
    • Login

    Yubico 5 USB device in Waydroid

    Scheduled Pinned Locked Moved Solved Waydroid
    2 Posts 1 Posters 798 Views 1 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
      Reply
      • Reply as topic
      Log in to reply
      This topic has been deleted. Only users with topic management privileges can see it.
      • M Offline
        maven
        last edited by arubislander

        Since OTA 23 and the wireless display started to work on my device (pixel 3a) I have used this as my daily driver.

        The only thing I am missing is being able to authenticate ssh with a yubico key. Or really any external device.

        Since we need a newer ssh than the built in 7.2 my reasoning has been that this can only be done from a libertine container.

        As such I have tried all the different packages and many ppa:s just to see if I can interact with the device.

        The device shows up for lsusb.

        So this gave me hope, even though none of the built in packages will interact with the key I thought it could be possible to compile openssh with -with-security-key-builtin in a container. But so far I have not had any success.

        So next I decided to try build openssh in a container and smuggle the binaries out.

        Now I can bind mount a usb stick into the container, though the /media/phablet directory so usb devices and hubs seem to be accessible even within. But I ran into problems with this approach as in the end I could not write to the usb stick from inside the container. Perhaps there are some limitations, I have no problem writing outside the container.

        So at the moment I am sort of lost for ideas, does anyone have a good direction for me?

        Are usb devices generally not accessible from inside a container?

        I only need one of the functions to work in the end. So either fido2 with ecdsa-sk, piv11 or even gpg. Is waiting for 20.04 the best bet of making a yubico stick work?

        Thanks for all the great work, even with this minor setback I feel this the best approach to getting a device that I can do some work from and at the same time a usable phone in one

        M 1 Reply Last reply Reply Quote 1
        • M Offline
          maven @maven
          last edited by maven

          @maven

          So I got to my solution. Hold on to your hats its not very elegant

          And sorry it does not use libertine, so perhaps we should move this and edit the title

          I followed the instructions for installing waydroid from here

          https://forums.ubports.com/topic/5907/open-ubuntu-touch-to-all-android-applications/116

          I skipped the google integration with either g suit or micro g. Where we are going we do not need this.

          Then I used the browser to download and install f-droid. After which I used f-droid to install termbot.

          Voila, ssh with yubico keys, even with working nfc! Fantastic. This will hold me for a long time

          1 Reply Last reply Reply Quote 0
          • M maven marked this topic as a question on
          • M maven has marked this topic as solved on
          • arubislanderA arubislander moved this topic from Libertine on
          • First post
            Last post