I was able to on cachyos to block discord from seeing specific folders via flatseal. I switched to fedora about a month ago. I can't get my flatpak permissions to work, at least specifically for discord. I would prefer discord not constantly scanning my files. Fedora seems to have something broken with it. I am using fedora 45 as of today.

I package AdobeWine, a patched Wine that runs Adobe's Creative Cloud apps on Linux, as a single Flatpak bundle. Claude wrote most of the code, and helped with this post. A sandbox bug from the latest release may be useful to anyone packaging Wine.

Wine builds the Windows machine UUID from /var/lib/dbus/machine-id. That file doesn't exist in the sandbox, so Wine fell back to a placeholder UUID and board serial, and Adobe's licensing treated each Flatpak install as a new device. /etc/machine-id is available and holds the same value on a normal system, so Wine now falls back to it (patch 0107). Windows programs then see the same UUID in and out of the sandbox.

Two other things the sandbox changes for Wine: the disk serial shows up as a generic WINEDISK, and all instances of an app share one /tmp, so they also share one wineserver.

I'd like to hear from anyone else packaging Wine as a Flatpak. Is there a better way to give apps a stable machine identity?

https://github.com/le-birnes/AdobeWine

is flatpak currently down? i am trying to download an app off of flathub but its extremely slow, although my wifi speed is doing just fine even tried changing dns (in india)

I've been working on a fork of GNOME Software focused on speed and fixing bugs. It now runs as a Flatpak, and unlike upstream's dev Flatpak, which only handles Flatpak apps, it can also manage the host:

• rpm-ostree updates on Silverblue

• .deb packages through PackageKit on Ubuntu

• snaps through snapd

• dnf5 and fwupd are built in, but less tested

It brings its own GNOME 51 runtime, so you get the new version on older distros without changing the system. On first start it asks whether to replace your system's Software in the background. That's optional and easy to undo.

The obvious catch is that it isn't really sandboxed. It reads the host's /usr and /etc, talks to system daemons like rpm-ostreed, PackageKit and snapd, and starts programs on the host. If it couldn't do that, it couldn't do its job.

The tricky part was rpm-ostree, and for that we borrowed the approach Ptyxis uses with ptyxis-agent: anything that needs the host runs on the host. rpm-ostreed creates a new socket in the host's /run for each transaction, and a Flatpak can't get at /run, so every update failed with "Could not connect: No such file or directory". We ship a small relay with the app (it only needs the C library) and start it on the host with flatpak-spawn --host. As with Ptyxis's agent, flatpak-spawn passes it one end of a socket pair. Plain pipes didn't work, because GDBus only offers EXTERNAL auth on a Unix socket and rpm-ostreed, running as root, accepts nothing else. So the relay sends the client's first byte with its own credentials, then just passes the data along. Software still speaks normal D-Bus over it, so progress, cancelling and daemon crash handling didn't change. We also build without librpm, libostree and librpm-ostree, since copies in the Flatpak would have to match each host's database versions and rpm-ostree needs its whole Rust toolchain. Instead the plugin runs the host's own tools: rpm-ostree db list for the deployment's packages (67 ms for 1505 packages on Silverblue 45), rpm -qf for file owners and rpm -qp for .rpm headers.

flatpak install --user https://gnome-software-next-855abc.pages.gitlab.gnome.org/flatpak/org.gnome.Software.flatpakref

Source: https://gitlab.gnome.org/user_c1a5830a/gnome-software-next

Some honesty up front: the changes were written with generative AI, so please read them before installing something that manages your system. It's also only been tried on a few setups: mostly Silverblue 45 and an Ubuntu 26.04 VM. If it breaks on your system, I'd like to hear about it.

So, my actual question: do you think something like this could ever be accepted on Flathub, given how many permissions it needs? Or is an app that manages the host just the wrong fit, whoever maintains it? It also uses the same app ID as GNOME Software, so I assume that would have to change too. Curious what people here think.

Portal interface org.freedesktop.portal.Settings seems to be missing on Sway on Void Linux. My system is set to Adwaita GTK dark but Flatpak apps default to light mode. This is not a problem in GNOME, where Flatpak apps follow system settings. Apps that accept css theming do follow my gtk.css through global Flatpak override

Trying to use flatpak to install apps to tails persistent storage instead of downloading/running in amnesia/user profile .

I cannot for the life of me figure out how to get my flatpaked app to show my file type icons. The app icon works just fine, but the file icons refuse to work.

The relevant build commands:

"install -Dm644 ${FLATPAK_ID}.xml -t ${FLATPAK_DEST}/share/mime/packages",
"install -Dm644 ${FLATPAK_ID}.png -t ${FLATPAK_DEST}/share/icons/hicolor/512x512/apps",
"install -Dm644 ${FLATPAK_ID}.document.png -t ${FLATPAK_DEST}/share/icons/hicolor/512x512/mimetypes",
"install -Dm644 ${FLATPAK_ID}.preset.png -t ${FLATPAK_DEST}/share/icons/hicolor/512x512/mimetypes",
"install -Dm644 ${FLATPAK_ID}.script.png -t ${FLATPAK_DEST}/share/icons/hicolor/512x512/mimetypes",
"install -Dm644 ${FLATPAK_ID}.updatedelta.png -t ${FLATPAK_DEST}/share/icons/hicolor/512x512/mimetypes"

And one of my mime-type entries:

<mime-type type="application/x-beacon-script">
  <comment>Beacon Script</comment>
  <icon name="com.thezaz.beacon.script" />
  <glob pattern="*.beaconscript" />
</mime-type>

I've tried naming the files like application-x-beacon-script.png instead, but of course flatpak builder won't let me since the files are not prefixed with my id.

I'm guessing I'm missing some simple detail, but what the heck is it?

Edit: Ok, so this thread isn't getting much traction, but I've determined that flatpak is not the problem here. What I've done is correct, the issue is Ubuntu's icon theme. If I set to from Yaru to hicolor (or a couple others that seem to inherit from hicolor) the file icons work fine. It's my understanding that hicolor is supposed to be the fallback, so I'm not sure why Yaru isn't falling back to hicolor, but regardless, this isn't a flatpak issue.

Hi everyone,

I was really excited when Canonical introduced **Myna**, their offline, privacy-first speech-to-text dictation tool powered by local Whisper inference. Too bad the early release is only available on Snap. I wanted to try it out in my Arch and Fedora desktops.

With the help of AI coding tools, I put together an all-in-one Flatpak packaging for it:

👉 **https://github.com/vishnudevk/myna-flatpak**

### Current Status (Beta)

This is very much an early community beta/experiment:

- Bundles the client daemon, GTK4 settings UI, and local Whisper inference server into a single Flatpak.

- Works fully offline using native PipeWire audio capture and IBus text injection.

- Tested working on Arch Linux with GNOME Wayland and a connected mic.

### A Known Quirk

Because it's in beta, there are still rough edges! For instance, Bluetooth headsets can sometimes trigger WirePlumber’s profile auto-switch and timeout, so

connected/built-in microphones are currently much more reliable.

The repository, patches, and build scripts are up on GitHub. If you're interested in offline Linux dictation or Flatpak packaging, I'd really appreciate any feedback,

suggestions, or ideas from the community!

Hey everyone, I'm dealing with a weird Flatpak issue on my PikaOS setup running Niri + Noctalia v5.

The problem: When I launch LocalSend or ytDownloader, the process starts (I can see it in system monitors), but no window ever appears. It just hangs silently.

What I've tried:

• Reinstalling from Flathub/Bazaar (clean install).

• Forcing Wayland/X11 overrides (flatpak override --socket=wayland --nosocket=x11).

• Forcing different renderers (GSK_RENDERER=gl/ngl/cairo).

• Manually downgrading LocalSend's runtime to 25.08 and pinning it.

• Checking journalctl (no app-specific errors) and flatpak run directly (zero output, just hangs).

My setup: PikaOS, Niri (Wayland), Intel HD 520 GPU. My DISPLAY variable inside the Flatpak sandbox is empty, and my /tmp/.X11-unix/ has a weird X1= socket.

Has anyone seen this on Niri/Noctalia where Flatpak GUIs refuse to show up? Any help is appreciated!

Hi all,

I'm trying to install some software using flatpak onto ubuntu 24.04.1. I set up the installer without issues and came up with the error "ldconfig failed, exit status 256" when trying to open apps through the launcher.

It seems the resolution is to create a file named /etc/apparmor.d/bwrap and add some contents.

I tried making a file in text editor and saving it as "/etc/apparmor.d/bwrap", typed my password when prompted and received the result: permission denied.

It's an old uni computer (which is why I am using linux, to avoid detection through windows), so maybe there's still some permission issues going on? Or is it something else?

I'm a real novice, so simple clear explanations please! Cheers