[Bug 2062148] Re: Snapd 2.62 brakes U2F in Firefox

Bug Watch Updater 2062148 at bugs.launchpad.net
Fri Apr 26 19:28:55 UTC 2024


Launchpad has imported 21 comments from the remote bug at
https://bugzilla.mozilla.org/show_bug.cgi?id=1892628.

If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
https://help.launchpad.net/InterBugTracking.

------------------------------------------------------------------------
On 2024-04-21T14:14:06+00:00 Dev+mozilla wrote:

This is with Firefox 125.0 installed via Snap on Kubuntu Linux 23.10
with Kernel 6.5.0.

I'm using my YubiKey Neo as second factor via U2F for my accounts at
Heroku, Google, GitHub, TYPO3 and Bitwaren. This is the device
description my system logs when I insert my YubiKey:

Yubico YubiKey OTP+FIDO+CCID

A few days ago (possibly after a Firefox update, but I'm not completely
sure, as I do all updates in a timely manner), using the YubiKey U2F for
2FA stopped working reliably anymore in Firefox: Most of the times, the
website does not register when I touch the pad on the YubiKey, and
sometimes it still does.

My private GPG key on the key is still working fine, and U2F on Chrome
also continues to work reliably.

We have the same problem on a different computer (also Kubuntu 23.10,
also on Firefox) with a different YubiKey on different accounts.

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/1

------------------------------------------------------------------------
On 2024-04-21T14:24:35+00:00 Evilpies wrote:

Can you please try a regular (non-snap) Firefox build?

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/2

------------------------------------------------------------------------
On 2024-04-21T14:50:38+00:00 Dev+mozilla wrote:

I've just tested with Firefox 125.0.1 downloaded as tgz: In this non-
Snap version, the problem does indeed not occur (anymore).

Very strangely, now with the Snap version of Firefox, the problem
doesn't occur anymore.

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/3

------------------------------------------------------------------------
On 2024-04-21T14:51:27+00:00 Dev+mozilla wrote:

Are there any logs that would be helpful to send (syslog? Firefox
console?) to help track this down?

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/4

------------------------------------------------------------------------
On 2024-04-22T16:11:54+00:00 Stefaan-lippens-4 wrote:

I'm having the same issue with:
- Firefox 124.0.2, Snap on Ubuntu 22.04.4 LTS
- Yubikey 5C NFC

Using my yubikey worked reliable for months (mainly for GitHub login),
but since somewhere last week it stopped working.

It still works in Chromium (124.0.6367.60, snap)

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/6

------------------------------------------------------------------------
On 2024-04-22T16:31:16+00:00 Jschanck wrote:

*** Bug 1892476 has been marked as a duplicate of this bug. ***

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/7

------------------------------------------------------------------------
On 2024-04-22T16:47:17+00:00 Lissyx+mozillians wrote:

While not yet merged, it is possible to run `mozregression` on Snap
builds, https://github.com/lissyx/mozregression/tree/tc-snap-upstream

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/8

------------------------------------------------------------------------
On 2024-04-22T16:49:00+00:00 Lissyx+mozillians wrote:

(and I just tested, my Firefox 125 on Snap works well with yubikey,
tested on https://webauthn.io on 23.10)

Amin, is there something on 22.04 which might be regressed and not on
newer versions?

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/9

------------------------------------------------------------------------
On 2024-04-22T16:49:57+00:00 Lissyx+mozillians wrote:

```
$ snap info firefox 
name:      firefox
summary:   Mozilla Firefox web browser
publisher: Mozilla✓
store-url: https://snapcraft.io/firefox
contact:   https://support.mozilla.org/kb/file-bug-report-or-feature-request-mozilla
license:   unset
description: |
  Firefox is a powerful, extensible web browser with support for modern web application
  technologies.
commands:
  - firefox
  - firefox.geckodriver
snap-id:      3wdHCAVyZEmYsCMFDE9qt92UV8rC8Wdk
tracking:     latest/stable
refresh-date: Il y a 4 jours, à 13 h 21 HNR
channels:
  latest/stable:    125.0.2-1     2024-04-22 (4173) 282MB -
  latest/candidate: 125.0.2-1     2024-04-19 (4173) 282MB -
  latest/beta:      126.0b3-1     2024-04-19 (4170) 285MB -
  latest/edge:      127.0a1       2024-04-22 (4179) 303MB -
  esr/stable:       115.10.0esr-1 2024-04-16 (4126) 256MB -
  esr/candidate:    115.10.0esr-1 2024-04-11 (4126) 256MB -
  esr/beta:         ↑                                     
  esr/edge:         ↑                                     
installed:          125.0-1                  (4136) 282MB -
$ snap connections firefox
Interface               Connecteur                      Prise                           Notes
alsa                    firefox:alsa                    -                               -
audio-playback          firefox:audio-playback          :audio-playback                 -
audio-record            firefox:audio-record            :audio-record                   -
avahi-observe           firefox:avahi-observe           :avahi-observe                  -
browser-support         firefox:browser-sandbox         :browser-support                -
camera                  firefox:camera                  :camera                         -
content[gnome-42-2204]  firefox:gnome-42-2204           gnome-42-2204:gnome-42-2204     -
content[gtk-3-themes]   firefox:gtk-3-themes            gtk-common-themes:gtk-3-themes  -
content[icon-themes]    firefox:icon-themes             gtk-common-themes:icon-themes   -
content[sound-themes]   firefox:sound-themes            gtk-common-themes:sound-themes  -
cups-control            firefox:cups-control            :cups-control                   -
dbus                    -                               firefox:dbus-daemon             -
desktop                 firefox:desktop                 :desktop                        -
desktop-legacy          firefox:desktop-legacy          :desktop-legacy                 -
gsettings               firefox:gsettings               :gsettings                      -
hardware-observe        firefox:hardware-observe        :hardware-observe               -
home                    firefox:home                    :home                           -
joystick                firefox:joystick                :joystick                       -
mount-control           firefox:host-hunspell           :mount-control                  -
mpris                   -                               firefox:mpris                   -
network                 firefox:network                 :network                        -
network-bind            firefox:network-bind            :network-bind                   -
network-observe         firefox:network-observe         -                               -
opengl                  firefox:opengl                  :opengl                         -
personal-files          firefox:dot-mozilla-firefox     :personal-files                 -
removable-media         firefox:removable-media         :removable-media                -
screen-inhibit-control  firefox:screen-inhibit-control  :screen-inhibit-control         -
system-files            firefox:etc-firefox             :system-files                   -
system-packages-doc     firefox:system-packages-doc     :system-packages-doc            -
u2f-devices             firefox:u2f-devices             :u2f-devices                    -
unity7                  firefox:unity7                  :unity7                         -
upower-observe          firefox:upower-observe          :upower-observe                 -
wayland                 firefox:wayland                 :wayland                        -
x11                     firefox:x11                     :x11                            -

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/10

------------------------------------------------------------------------
On 2024-04-25T13:36:47+00:00 Lissyx+mozillians wrote:

(In reply to stefaan.lippens from comment #4)
> I'm having the same issue with:
> - Firefox 124.0.2, Snap on Ubuntu 22.04.4 LTS
> - Yubikey 5C NFC
> 
> Using my yubikey worked reliable for months (mainly for GitHub login), but since somewhere last week it stopped working.
> 
> It still works in Chromium (124.0.6367.60, snap)

Can you check `snap connections firefox` and especially if you have:
> u2f-devices             firefox:u2f-devices             :u2f-devices                    -

I think this is used for any of those keys

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/13

------------------------------------------------------------------------
On 2024-04-25T13:40:58+00:00 Lissyx+mozillians wrote:

Created attachment 9398644
Capture d’écran du 2024-04-25 15-37-51.png

This is where I'm stuck on when I disconnect the `u2f-device` plug of snap:
```
$ snap connections firefox 
[...]
u2f-devices             firefox:u2f-devices             -                               -
[...]
```

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/14

------------------------------------------------------------------------
On 2024-04-25T13:42:37+00:00 Lissyx+mozillians wrote:

Ok so now it is not working anymore for me as well, even after
reconnecting

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/15

------------------------------------------------------------------------
On 2024-04-25T14:26:22+00:00 Lissyx+mozillians wrote:

Unfortunately, I cannot use `mozregression` because:
 - `snap connect` from `mozregression` hit https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/2043993
 - not doing `snap refresh` we have non working u2f interface at all
 - doing `snap refresh` updates us to latest version ...

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/16

------------------------------------------------------------------------
On 2024-04-25T14:36:07+00:00 Lissyx+mozillians wrote:

I manually went back to version 122 and it was still no working, so
based on comment 7 and comment 2, I suspect it's more likely to be a
snapd / integration issue below firefox and unrelated with us?

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/17

------------------------------------------------------------------------
On 2024-04-25T14:47:37+00:00 Lissyx+mozillians wrote:

So if I start `snap run firefox` with the key plugged in, then it works

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/18

------------------------------------------------------------------------
On 2024-04-25T14:48:01+00:00 Amin Bandali wrote:

I'm not aware of any related regressions on 22.04. Sadly I can't do any
testing for this at the moment because I don't have any U2F devices, but
I will look into acquiring one and see if I can reproduce the issue
and/or find out anything more.

I wonder if Firefox's Browser Console (Ctrl+Shift+J) might show any
relevant error messages?  Also, since the issue occurs with the Firefox
snap, I'd recommend looking over https://snapcraft.io/docs/debug-snaps
for some general tips for debugging snap packages for issues like
apparmor policy violations, etc., and gathering and providing more logs
that may help diagnose the issue.

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/19

------------------------------------------------------------------------
On 2024-04-25T14:49:34+00:00 Lissyx+mozillians wrote:

(In reply to Oliver Klee from comment #3)
> Are there any logs that would be helpful to send (syslog? Firefox console?) to help track this down?

I can't find any, but maybe :jschanck knows?

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/20

------------------------------------------------------------------------
On 2024-04-25T14:52:46+00:00 Lissyx+mozillians wrote:

When plugging the yubikey AFTER running `snap run firefox`:
 - nothing in `sudo snappy-debug`
 - `about:webauthn` shows no info
 - browser console or tab console does not show any error

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/21

------------------------------------------------------------------------
On 2024-04-25T14:57:54+00:00 Lissyx+mozillians wrote:

i'm reproducing the same behavior on 23.10 with the `yubioath-desktop` snap:
 - `snap run yubioath-desktop` without the yubikey plugged: not detected
 - plug the yubikey then `snap run yubioath-desktop`: detected

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/22

------------------------------------------------------------------------
On 2024-04-25T17:25:04+00:00 Jschanck wrote:

You could try setting `MOZ_LOG=authenticator::*:5`.

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/23

------------------------------------------------------------------------
On 2024-04-26T18:41:06+00:00 PeterJCLaw wrote:

Cross linking -- there appears to be some discussion at
https://bugs.launchpad.net/snapd/+bug/2062148, which appears to indicate
a potential fix is coming in the next snapd.

Reply at: https://bugs.launchpad.net/snapd/+bug/2062148/comments/24


** Changed in: firefox
       Status: Unknown => Confirmed

-- 
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to Mozilla.
https://bugs.launchpad.net/bugs/2062148

Title:
  Snapd 2.62 brakes U2F in Firefox

To manage notifications about this bug go to:
https://bugs.launchpad.net/firefox/+bug/2062148/+subscriptions




More information about the Ubuntu-mozillateam-bugs mailing list