On Tue, 28 Jan 2020 at 23:14:35 +0000, Lennart Weller wrote: > From what I have gathered this requires a change of the runtime to > interface with the p11-kit daemon correctly. But I don't know if that > is something that can be quickly fixed on your side.
Changes to the runtime can only be done by the maintainers of the runtime. As a maintainer of the flatpak Debian package, I do not control the apps you have chosen to run, or the runtimes those apps have chosen to use. I *do* control the version of the flatpak program that you're running (when you get it from Debian), so if the best way to resolve this issue turns out to involve code changes in the flatpak program, getting those into Debian is something I'm responsible for. However, it isn't clear yet whether code changes in flatpak would be helpful here. I've opened https://github.com/p11-glue/p11-kit/issues/275 to ask the upstream maintainers of p11-kit whether flatpak is doing something that is expected to work (in which case this is a p11-kit bug), or whether flatpak is doing something they consider to be unsupportable (in which case the flatpak feature that shares the host p11-kit trust store with the container would probably have to be removed), or something else. smcv
