Yubico 5 USB device in Waydroid

[maven]

Since OTA 23 and the wireless display started to work on my device (pixel 3a) I have used this as my daily driver.

The only thing I am missing is being able to authenticate ssh with a yubico key. Or really any external device.

Since we need a newer ssh than the built in 7.2 my reasoning has been that this can only be done from a libertine container.

As such I have tried all the different packages and many ppa:s just to see if I can interact with the device.

The device shows up for lsusb.

So this gave me hope, even though none of the built in packages will interact with the key I thought it could be possible to compile openssh with -with-security-key-builtin in a container. But so far I have not had any success.

So next I decided to try build openssh in a container and smuggle the binaries out.

Now I can bind mount a usb stick into the container, though the /media/phablet directory so usb devices and hubs seem to be accessible even within. But I ran into problems with this approach as in the end I could not write to the usb stick from inside the container. Perhaps there are some limitations, I have no problem writing outside the container.

So at the moment I am sort of lost for ideas, does anyone have a good direction for me?

Are usb devices generally not accessible from inside a container?

I only need one of the functions to work in the end. So either fido2 with ecdsa-sk, piv11 or even gpg. Is waiting for 20.04 the best bet of making a yubico stick work?

Thanks for all the great work, even with this minor setback I feel this the best approach to getting a device that I can do some work from and at the same time a usable phone in one

[maven]

@maven

So I got to my solution. Hold on to your hats its not very elegant

And sorry it does not use libertine, so perhaps we should move this and edit the title

I followed the instructions for installing waydroid from here

https://forums.ubports.com/topic/5907/open-ubuntu-touch-to-all-android-applications/116

I skipped the google integration with either g suit or micro g. Where we are going we do not need this.

Then I used the browser to download and install f-droid. After which I used f-droid to install termbot.

Voila, ssh with yubico keys, even with working nfc! Fantastic. This will hold me for a long time