Closed IndrekHaav closed 2 years ago
Ubuntu 22.04 support will come in our next release. We still have some minor improvements and testing to do before we can release new ID-software version but we hope to get new version out in June.
Any updated ETA on this?
New ID-software release that supports Ubuntu 22.04 is now available.
Please note that there are two known defects in Ubuntu 22.04:
2. In Ubuntu 22.04 Firefox is installed as SNAP, in which the ID-card cannot be used for online authentication and signing. To authenticate and sign with the ID-card on the web you need to install a regular version of Firefox. ([Firefox bug report](https://bugzilla.mozilla.org/show_bug.cgi?id=1734371))
For future reference, a workaround might be to use Firefox from the Mozilla PPA instead. Something along the following lines might do the trick. Don't forget to backup the SNAP versions of your important Firefox profiles, which you might have to restore later.
sudo snap remove firefox
sudo apt-get remove firefox
cat << EOF | sudo tee /etc/apt/preferences.d/mozilla-firefox > /dev/null
Package: *
Pin: release o=LP-PPA-mozillateam
Pin-Priority: 1001
Package: firefox*
Pin: release o=Ubuntu*
Pin-Priority: -1
EOF
sudo add-apt-repository ppa:mozillateam/ppa
sudo apt-get update
sudo apt-get install firefox
I also needed to add the following lines to /etc/apparmor.d/local/usr.bin.firefox
to make authentication and signing work in Firefox:
# I don't thoroughly understand what these lines do:
/run/pcscd/pcscd.comm rw,
unix (connect, receive, send)
type=stream
peer=(addr="@/run/pcscd/pcscd.comm"),
/usr/bin/web-eid ux,
These might not be the most secure AppArmor profile lines, but at least stuff seems to work with Firefox now. I hope this helps.
Currently the latest supported Ubuntu version is 21.10. Ubuntu 22.04 LTS was released a month ago, please add support for it as well.
Trying to use the "impish" repo doesn't work:
Apparently Ubuntu doesn't provide libssl1.1 for 22.04, only libssl3. It might be possible to make it work by downloading and installing libssl1.1 manually (e.g. from Debian), but I haven't tried it.