diff options
author | Jeremy <jmzagorski@proton.me> | 2024-12-21 10:41:56 -0500 |
---|---|---|
committer | GitHub <noreply@github.com> | 2024-12-21 10:41:56 -0500 |
commit | 66ceba96bdaf10391540e026147e70c71e85576c (patch) | |
tree | ff4ad1d10324c23c553cf3e50dbd939f74043684 | |
parent | Merge pull request #464 from forbytten/add_uids_issue_445 (diff) | |
download | YubiKey-Guide-66ceba96bdaf10391540e026147e70c71e85576c.tar.gz |
docs(wsl): Add usbipd in WSL setup
Add usbipd-win library as an alternate method to accessing the yubikey since vuori/weasel-pageant is archived.
-rw-r--r-- | README.md | 20 |
1 files changed, 20 insertions, 0 deletions
@@ -1389,6 +1389,26 @@ Connect to the remote host and use `ssh-add -l` to confirm forwarding works. Agent forwarding may be chained through multiple hosts. Follow the same [protocol](#remote-host-configuration) to configure each host. +An alternate method is the [usbipd-win](https://github.com/dorssel/usbipd-win) library. If you encounter issues with accessing the YubiKey in WSL after configuring usbipd-win, you may need to add custom polkit rules to ensure proper permissions for the pcscd service. Here's an example configuration using a scard group (the group logic is optional): + +Create a new rule file at /etc/polkit-1/rules.d/99-pcscd.rules: + +```bash +polkit.addRule(function(action, subject) { + if (action.id == "org.debian.pcsc-lite.access_card" && + subject.isInGroup("scard")) { + return polkit.Result.YES; + } +}); + +polkit.addRule(function(action, subject) { + if (action.id == "org.debian.pcsc-lite.access_pcsc" && + subject.isInGroup("scard")) { + return polkit.Result.YES; + } +}); +``` + ### Replace agents To launch `gpg-agent` for use by SSH, use the `gpg-connect-agent /bye` or `gpgconf --launch gpg-agent` commands. |