flathub / flathub/org.freedesktop.Platform.GL.nvidia
Stop including libnvidia-pkcs11.so.* for Flatpak runtimes with OpenSSL 3
- Dominant language
- C
- Stars
- 80
- Forks
- 45
- Avg merge
- 10m
- Merged PRs (30d)
- 3
Description
The Nvidia proprietary driver includes two PKCS#11 libraries:
* `libnvidia-pkcs11.so.*` depends on OpenSSL 1.1 (specifically `libcrypto.so.1.1`)
* `libnvidia-pkcs11-openssl3.so.*` depends on OpenSSL 3 (`libcrypto.so.3`)
When using Nvidia proprietary drivers on an OS or a Flatpak runtime that does not have OpenSSL 1.1, `libnvidia-pkcs11.so.*` cannot be loaded and is useless. Current Flatpak runtimes do not have OpenSSL 1.1 available, only OpenSSL 3.
OSs that ship only OpenSSL 3 and have dropped OpenSSL 1.1 often do not package the useless `libnvidia-pkcs11.so.*` in their Nvidia proprietary driver: for example, Debian testing/unstable has a `libnvidia-pkcs11-openssl3` package, but no `libnvidia-pkcs11`. I think the Flatpak-packaged Nvidia driver should consider doing the same.
Inclusion of the unusable library leads to warning messages when using Steam's pressure-vessel container tool, which cannot easily know that a library is expected to be present-but-unusable:
`x86_64-linux-gnu-capsule-capture-libs: warning: Dependencies of libnvidia-pkcs11.so.550.78 not found, ignoring: Missing dependencies: Could not find "libcrypto.so.1.1" in LD_LIBRARY_PATH [...], ld.so.cache, DT_RUNPATH or fallback /lib:/usr/lib`
which causes users to be misled when trying to diagnose genuine issues, and waste their time on reporting the warning as a bug.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.