native ssh daemon on darwin hosts lacks fido support

[zowoq]

This blocks community members from using yubikeys, etc.

[Mic92]

Does nix-darwin offers a replacement? What does actually macOS upgrades look like, do they need the kvm console?

[zowoq]

Does nix-darwin offers a replacement?

No.

What does actually macOS upgrades look like

Usually simple but if it doesn't work we'll likely be locked out.

do they need the kvm console?

Don't know if hetzner actually anything like this for macos, they only mention ssh or vnc from the system.

https://docs.hetzner.com/robot/dedicated-server/mac-mini/getting-started/

[Mic92]

I think a colleagues of mine did use kvm console.

[zowoq]

Looks like robot.hetzner.com will let me request remote console for the macs.

[zowoq]

I haven't really got around to investigating this yet anyway, I don't know yet if just upgrading the system would be enough to resolve this or if it just gets us a newer ssh version and we'd still need to provide the fido libs or whatever.

[Mic92]

@phear does macos has now ssh fido support?

[zowoq]

hetzner@darwin03> sw_vers                                                                                                                                                                                
ProductName:            macOS
ProductVersion:         14.3
BuildVersion:           23D56

Needed a kvm console to restore vnc on darwin03 so I upgraded the macos version as well. If we still need to provide the fido libs I'll see if I can sort it out in the next couple of weeks.

[zowoq]

Tentatively fixed in #1527.