flathub / flathub/org.freedesktop.Platform.GL.nvidia

Stop including libnvidia-pkcs11.so.* for Flatpak runtimes with OpenSSL 3

Open
#259 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
80
Forks
45
Avg merge
10m
Merged PRs (30d)
3

Description

The Nvidia proprietary driver includes two PKCS#11 libraries:

* `libnvidia-pkcs11.so.*` depends on OpenSSL 1.1 (specifically `libcrypto.so.1.1`)
* `libnvidia-pkcs11-openssl3.so.*` depends on OpenSSL 3 (`libcrypto.so.3`)

When using Nvidia proprietary drivers on an OS or a Flatpak runtime that does not have OpenSSL 1.1, `libnvidia-pkcs11.so.*` cannot be loaded and is useless. Current Flatpak runtimes do not have OpenSSL 1.1 available, only OpenSSL 3.

OSs that ship only OpenSSL 3 and have dropped OpenSSL 1.1 often do not package the useless `libnvidia-pkcs11.so.*` in their Nvidia proprietary driver: for example, Debian testing/unstable has a `libnvidia-pkcs11-openssl3` package, but no `libnvidia-pkcs11`. I think the Flatpak-packaged Nvidia driver should consider doing the same.

Inclusion of the unusable library leads to warning messages when using Steam's pressure-vessel container tool, which cannot easily know that a library is expected to be present-but-unusable:

`x86_64-linux-gnu-capsule-capture-libs: warning: Dependencies of libnvidia-pkcs11.so.550.78 not found, ignoring: Missing dependencies: Could not find "libcrypto.so.1.1" in LD_LIBRARY_PATH [...], ld.so.cache, DT_RUNPATH or fallback /lib:/usr/lib`

which causes users to be misled when trying to diagnose genuine issues, and waste their time on reporting the warning as a bug.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.