[artix-general] Has anyone gotten seatd stand alone (no elogind, no polkit) allowing yubikey to work as non root?

[Javier]

OK, found it, hehe.

In several places this was suggested:

> % doas groupadd plugdev
> % doas gpasswd -a <user> plugdev

But that's not sufficient on artix, so I found a void bug [1] indicating that building "pcsclite" with polkit enabled breaks setups not using polkit.  Then I went to see the PR fixing the bug [2] and all it did was to disable polkit on the build and remove the polkit dependency.  Now looking forward to what void has on master on its build config [3] and I notice it's pretty much the same build config we have on artix [4] except void keeps disabling polkit, while artix enables it instead, and artix enables serial as well which void doesn't (although if the default is to enable things, then perhaps it's the same for both but I have no clue).  Another difference is that artix depends on libpolkit-gobject and has a make dependency on polkit, while void doesn't.

Curiously enough void offers polkit [5], so I guess the yubikey is working on void whether when users prefer polkit over seatd, and also when users prefer seatd over polkit.

Guess what, I applied this patch:

> % diff -Naur pcsclite.old/ pcsclite/
> diff -Naur pcsclite.old/PKGBUILD pcsclite/PKGBUILD
> --- pcsclite.old/PKGBUILD       2025-04-02 13:49:23.000000000 -0600
> +++ pcsclite/PKGBUILD   2025-05-15 20:54:33.275892038 -0600
> @@ -18,12 +18,10 @@
>  )
>  depends=(
>    'libudev.so'
> -  'libpolkit-gobject-1.so'
>  )
>  makedepends=(
>    'git'
>    'meson'
> -  'polkit'
>    'udev'
>  )
>  optdepends=(
> @@ -48,7 +46,7 @@
>    local meson_options=(
>      -D libsystemd=false
>      -D libudev=true
> -    -D polkit=true
> +    -D polkit=false
>      -D serial=true
>    )
>    artix-meson PCSC build "${meson_options[@]}"

As you see, removing the dependencies of polkit, and disable polkit on the configuration, and with re-built the package, and with the prior group I set, things are working properly while using seatd instead of polkit, and yubikey works on Firefox and also this:

> % ykman info
> Device type: YubiKey 5C Nano
> Serial number: 29684086
> Firmware version: 5.7.1
> Form factor: Nano (USB-C)
> Enabled USB interfaces: OTP, FIDO, CCID
> 
> Applications
> Yubico OTP      Enabled
> FIDO U2F        Enabled
> FIDO2           Enabled
> OATH            Enabled
> PIV             Enabled
> OpenPGP         Enabled
> YubiHSM Auth    Enabled

One of my prior attempts made that prior CLI work but Firefox was not recognizing the yubikey at all.  With this void approach even Firefox (well Librefox) works fine.  So no issues at all.

So here it goes my question to the developers, can this patch be applied to artix?  If not, can we have two packages providing pcsclite and conflicting with each other?

> pcsclite-polkit
> pcsclite-non-polkit

I'm thinking just applying the patch will make everyone happy, as mentioned void supports both seatd and polkit, but I'll be happy if pcsclite-non-polkit exists as well.  The idea is not to become out of date with the package getting upgrades as I normally do.

Could devs help me out?

Many thanks !


[1]  [Building pcsclite with polkit enabled causes problems for existing setups](https://github.com/void-linux/void-packages/issues/47426)
[2]  [pcsclite: disable polkit](https://github.com/void-linux/void-packages/commit/0185054e91b57630840e7ce41e3f94cc2a0055bb)
[3]  [pcsclite void package template](https://github.com/void-linux/void-packages/blob/master/srcpkgs/pcsclite/template)
[4]  [pcsclite artix package PKGBUILD](https://gitea.artixlinux.org/packages/pcsclite/src/branch/master/PKGBUILD)
[5]  [polkit void package](https://github.com/void-linux/void-packages/tree/master/srcpkgs/polkit)


-- 
Javier