Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Stop including libnvidia-pkcs11.so.* for Flatpak runtimes with OpenSSL 3 #259

Open
smcv opened this issue Jun 10, 2024 · 0 comments
Open

Comments

@smcv
Copy link

smcv commented Jun 10, 2024

The Nvidia proprietary driver includes two PKCS#11 libraries:

  • libnvidia-pkcs11.so.* depends on OpenSSL 1.1 (specifically libcrypto.so.1.1)
  • libnvidia-pkcs11-openssl3.so.* depends on OpenSSL 3 (libcrypto.so.3)

When using Nvidia proprietary drivers on an OS or a Flatpak runtime that does not have OpenSSL 1.1, libnvidia-pkcs11.so.* cannot be loaded and is useless. Current Flatpak runtimes do not have OpenSSL 1.1 available, only OpenSSL 3.

OSs that ship only OpenSSL 3 and have dropped OpenSSL 1.1 often do not package the useless libnvidia-pkcs11.so.* in their Nvidia proprietary driver: for example, Debian testing/unstable has a libnvidia-pkcs11-openssl3 package, but no libnvidia-pkcs11. I think the Flatpak-packaged Nvidia driver should consider doing the same.

Inclusion of the unusable library leads to warning messages when using Steam's pressure-vessel container tool, which cannot easily know that a library is expected to be present-but-unusable:

x86_64-linux-gnu-capsule-capture-libs: warning: Dependencies of libnvidia-pkcs11.so.550.78 not found, ignoring: Missing dependencies: Could not find "libcrypto.so.1.1" in LD_LIBRARY_PATH [...], ld.so.cache, DT_RUNPATH or fallback /lib:/usr/lib

which causes users to be misled when trying to diagnose genuine issues, and waste their time on reporting the warning as a bug.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant