You run `ssh-keygen -t ed25519-sk -O resident`, and that's it, no additional software required as of OpenSSH 8.2. If you have an older model Yubikey you can try ecdsa-sk instead.

For more details, see:

https://github.blog/2021-05-10-security-keys-supported-ssh-g...

https://www.yubico.com/blog/github-now-supports-ssh-security...