[Improvement] Add u2f support

[oli09x]

Discord supports setting up and logging in with 2FA using security keys. This snap does not support security keys yet (probably due to missing u2f-devices plug).

[soumyaDghosh]

Can you share us some logs?

Like, install, the snappy-debug

sudo snap install snappy-debug

then, run snappy-debug and discord snap, try using the 2FA security key and see what snappy-debug logs?

[profdecoy]

I'm able to register a yubikey with discord via Firefox, but not in the discord snap. Discord never prompts for my key's PIN when trying to register or authenticate with the key in the snap.

Running snappy debug, this is what I get log wise:

$ sudo snappy-debug --only-snap=discord
INFO: Following '/var/log/syslog'. If have dropped messages, use:
INFO: $ sudo journalctl --output=short --follow --all | sudo snappy-debug
kernel.printk_ratelimit = 0
= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Discord" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Discord" requested_mask="read" denied_mask="read" peer="Xorg"
Ptrace: peer=Xorg (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Discord" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Discord" requested_mask="read" denied_mask="read" peer="snap.snapd-desktop-integration.snapd-desktop-integration"
Ptrace: peer=snap.snapd-desktop-integration.snapd-desktop-integration (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Discord" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Discord" requested_mask="read" denied_mask="read" peer="snap.snapd-desktop-integration.snapd-desktop-integration"
Ptrace: peer=snap.snapd-desktop-integration.snapd-desktop-integration (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Discord" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Discord" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Discord" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Discord" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Discord" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Discord" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Discord" requested_mask="read" denied_mask="read" peer="/usr/bin/wsdd"
Ptrace: peer=/usr/bin/wsdd (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Discord" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="open" class="file" profile="snap.discord.discord" name="/proc/5992/cmdline" pid=10331 comm="Utils" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
File: /proc/5992/cmdline (read)
Suggestion:
* adjust program to not access '@{PROC}/@{pid}/cmdline'

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Utils" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Utils" requested_mask="read" denied_mask="read" peer="Xorg"
Ptrace: peer=Xorg (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Utils" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Utils" requested_mask="read" denied_mask="read" peer="snap.snapd-desktop-integration.snapd-desktop-integration"
Ptrace: peer=snap.snapd-desktop-integration.snapd-desktop-integration (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Utils" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Utils" requested_mask="read" denied_mask="read" peer="snap.snapd-desktop-integration.snapd-desktop-integration"
Ptrace: peer=snap.snapd-desktop-integration.snapd-desktop-integration (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Utils" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Utils" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Utils" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Utils" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="open" class="file" profile="snap.discord.discord" name="/proc/10716/cmdline" pid=10331 comm="Utils" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
File: /proc/10716/cmdline (read)
Suggestion:
* adjust program to not access '@{PROC}/@{pid}/cmdline'

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Utils" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Utils" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Utils" requested_mask="read" denied_mask="read" peer="/usr/bin/wsdd"
Ptrace: peer=/usr/bin/wsdd (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Utils" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="open" class="file" profile="snap.discord.discord" name="/proc/166330/cmdline" pid=10331 comm="Utils" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
File: /proc/166330/cmdline (read)
Suggestion:
* adjust program to not access '@{PROC}/@{pid}/cmdline'

= AppArmor =
Time: 2025-06-09T10:2
Log: apparmor="DENIED" operation="ptrace" class="ptrace" profile="snap.discord.discord" pid=10331 comm="Utils" requested_mask="read" denied_mask="read" peer="unconfined"
Ptrace: peer=unconfined (read)
Suggestions:
* add 'system-observe' to 'plugs'
* do nothing if program otherwise works properly