Roman,
Hello! I checked out the issue you reported! Do you think the issue could be that nss-certs isn't installed system-wide? Security in mind, there's no harm in doing that, right? Also, couldn't Flatseal allow the filesystem be read-only? Using the echo command indicates that the file is in the user's directory (/home/user/.guix-profile/etc...) and in the root directory (/run/current-system/profile/etc...). However, using the SSL_CERT_FILE with the flatpak run command doesn't seem to stop the error from appearing. The error you get is exactly the error I have. P.S. (I'm only doing this since I have some old games to test out on the old PC I have. Not a Roblox person by any means haha). On Wednesday, June 10th, 2026 at 12:26 AM, Roman Riabenko <[email protected]> wrote: > У вт, 2026-06-09 у 22:53 +0000, g|ass.Houses via пише: > > Hello Guix Team! I discovered an issue related to my last message. It > > seems that I am missing CA-certificates. I was trying to use a > > flatpak, Lutris, and discovered that I can't install anything without > > these certificates. For example, trying to add a game gives me an > > error that says: > > > > Could not find a suitable bundle, invalid path: /home/user/.guix- > > profile/etc/ssl/certs/ca-certificate.crt > > > > I had to manually export the certificate file since it was missing in > > the first place, but it doesn't seem to work. From my research, it > > seems the certificates must be updated, but I don't see an equivalent > > command on Guix for "update-ca-certificates". Any help will be > > appreciated > > I do not have a bundle at the path which is indicated in your error > message on my Guix System installation. I wonder which variable does it > come from. What does the following report on your system? > > $ echo "$SSL_CERT_FILE" > /run/current-system/profile/etc/ssl/certs/ca-certificates.crt > > Note that I also have an issue with that path, so it is not right > either. See: https://codeberg.org/guix/guix/issues/9150 > > Does this work? > > $ SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt flatpak run > net.lutris.Lutris > > I noticed that I encounter the same issue with Lutris as you, unless I > specify that path. So, you must be having a variation of the issue > which I reported in #9150. > > $ flatpak run net.lutris.Lutris > 2026-06-10 08:21:17,803: Download failed: Could not find a suitable TLS > CA certificate bundle, invalid path: /run/current- > system/profile/etc/ssl/certs/ca-certificates.crt > Traceback (most recent call last): > File "/app/lib/python3.13/site-packages/lutris/util/downloader.py", > line 146, in async_download > response = requests.get(self.url, headers=headers, stream=True, > timeout=30, cookies=self.cookies) > File "/app/lib/python3.13/site-packages/requests/api.py", line 73, in > get > return request("get", url, params=params, **kwargs) > File "/app/lib/python3.13/site-packages/requests/api.py", line 59, in > request > return session.request(method=method, url=url, **kwargs) > ~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > File "/app/lib/python3.13/site-packages/requests/sessions.py", line > 587, in request > resp = self.send(prep, **send_kwargs) > File "/app/lib/python3.13/site-packages/requests/sessions.py", line > 701, in send > r = adapter.send(request, **kwargs) > File "/app/lib/python3.13/site-packages/requests/adapters.py", line > 460, in send > self.cert_verify(conn, request.url, verify, cert) > ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > File "/app/lib/python3.13/site-packages/requests/adapters.py", line > 263, in cert_verify > raise OSError( > ...<2 lines>... > ) > OSError: Could not find a suitable TLS CA certificate bundle, invalid > path: /run/current-system/profile/etc/ssl/certs/ca-certificates.crt > > > Roman >
