Install opensc smartcard driver automatically in the installed browsers (Firefox / Chromium)

[jdauphant-dinum]

Is your feature request related to a problem? Please describe

Smartcard (like Yubikey) aren't recognized automatically.

Describe the solution you'd like

No response

Describe alternatives you've considered

No response

The SecurixOS version you checked that didn't have the feature you are asking for

No response

[RISK-alt]

Happy to pick this up.

Registering the opensc PKCS#11 module means touching both the Firefox and the
Chromium configuration, which today live in modules/tools/firefox.nix and
modules/chromium/default.nix. Those are the files #71, #121 and #233 are
reshaping right now — #71 in particular moves modules/tools/firefox.nix into a
new modules/tools/browsers/ tree.

So I would rather wait for those to land and write this once against the final
layout, instead of writing it twice and conflicting with all three.

If #71 is likely to stay a draft for a while, say so and I will implement it
against the current layout instead.

[rlahfa-dinum]

Yeah, #71 is not going to move any time soon, but you'd be most than welcome to pick up #71 and implement this. :)

[RISK-alt]

It's okay, i will try to implement this tonight ^^.

[RISK-alt]

harder than I thought... but i will fix it, tonight.

[RISK-alt]

Implemented in #240.

It is stacked on #239, which picks up #71 and finishes it, so that one goes
first.

Firefox gets the module through the SecurityDevices policy. Chromium has no
equivalent policy on Linux, so a small user unit registers it in
~/.pki/nssdb. Both are covered by a VM test.