Installation

Detailed installation of the Gatebridge server program, configuration options, and systemd setup.

Full installation guide for the Gatebridge server program.

Requirements

• Linux (tested on Ubuntu 22.04+, Debian 12+, Fedora 38+)
• Python 3.11 or newer
• pip and venv
• Network access to your relay (WebSocket)

Install from source

git clone https://github.com/andreparames/fido2-android-bridge.git
cd fido2-android-bridge/linux-fido-daemon
python3 -m venv .venv
source .venv/bin/activate
pip install -e "."

Verify the install:

fido-daemon --version

Configuration

The program reads a TOML config file (default: ~/.config/fido-daemon/config.toml):

channel_id = "<from pairing>"
relay_url = "wss://your-relay.example.com/connection/websocket"
# relay_token = "..."  # if your relay requires auth

All values can also be set via environment variables:

Environment-variable pinning lasts only for the running session.

Pairing

fido-daemon pair -c ~/.config/fido-daemon/config.toml

• Generates the program’s static identity key
• Writes channel ID (and relay token) to the config
• Prints a fidobridge://pair?... link for the Android app

Pairing a different phone:

fido-daemon pair -c <config>      # new link
fido-daemon unpair -c <config>    # clear old pinned key

systemd user service

install -D -m 0644 linux-fido-daemon/systemd/fido-daemon.service \
  ~/.config/systemd/user/
systemctl --user daemon-reload
systemctl --user enable --now fido-daemon

Make sure the config file exists (fido-daemon pair -c ...) before enabling the service.

Virtual HID (browser sign-in)

To present the program as a virtual security key to browsers:

fido-daemon --uhid

Requires appropriate permissions to access /dev/uhid.

Troubleshooting