For posterity, I have found a solution and will be providing it here in thr case someone else has a similar issue.
You must use the following command: flatpak override --user --filesystem=$SSL_CERT_DIR:ro net.lutris.Lutris This was from the official Guix IRC. I'm not sure if this is a permament fix – I only had to use it once and I was good to go. Hopefully it will be of use for someone in the future. If anyone has concerns with this please let me know. Thank you all who provided help! On Wednesday, June 10th, 2026 at 7:24 AM, g|ass.Houses <[email protected]> wrote: > > Roman, > > Hello! I checked out the issue you reported! Do you think the issue could be > that nss-certs isn't installed system-wide? Security in mind, there's no harm > in doing that, right? Also, couldn't Flatseal allow the filesystem be > read-only? > > Using the echo command indicates that the file is in the user's directory > (/home/user/.guix-profile/etc...) and in the root directory > (/run/current-system/profile/etc...). However, using the SSL_CERT_FILE with > the flatpak run command doesn't seem to stop the error from appearing. The > error you get is exactly the error I have. > > P.S. (I'm only doing this since I have some old games to test out on the old > PC I have. Not a Roblox person by any means haha). > > On Wednesday, June 10th, 2026 at 12:26 AM, Roman Riabenko > <[email protected]> wrote: > > > У вт, 2026-06-09 у 22:53 +0000, g|ass.Houses via пише: > > > Hello Guix Team! I discovered an issue related to my last message. It > > > seems that I am missing CA-certificates. I was trying to use a > > > flatpak, Lutris, and discovered that I can't install anything without > > > these certificates. For example, trying to add a game gives me an > > > error that says: > > > > > > Could not find a suitable bundle, invalid path: /home/user/.guix- > > > profile/etc/ssl/certs/ca-certificate.crt > > > > > > I had to manually export the certificate file since it was missing in > > > the first place, but it doesn't seem to work. From my research, it > > > seems the certificates must be updated, but I don't see an equivalent > > > command on Guix for "update-ca-certificates". Any help will be > > > appreciated > > > > I do not have a bundle at the path which is indicated in your error > > message on my Guix System installation. I wonder which variable does it > > come from. What does the following report on your system? > > > > $ echo "$SSL_CERT_FILE" > > /run/current-system/profile/etc/ssl/certs/ca-certificates.crt > > > > Note that I also have an issue with that path, so it is not right > > either. See: https://codeberg.org/guix/guix/issues/9150 > > > > Does this work? > > > > $ SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt flatpak run > > net.lutris.Lutris > > > > I noticed that I encounter the same issue with Lutris as you, unless I > > specify that path. So, you must be having a variation of the issue > > which I reported in #9150. > > > > $ flatpak run net.lutris.Lutris > > 2026-06-10 08:21:17,803: Download failed: Could not find a suitable TLS > > CA certificate bundle, invalid path: /run/current- > > system/profile/etc/ssl/certs/ca-certificates.crt > > Traceback (most recent call last): > > File "/app/lib/python3.13/site-packages/lutris/util/downloader.py", > > line 146, in async_download > > response = requests.get(self.url, headers=headers, stream=True, > > timeout=30, cookies=self.cookies) > > File "/app/lib/python3.13/site-packages/requests/api.py", line 73, in > > get > > return request("get", url, params=params, **kwargs) > > File "/app/lib/python3.13/site-packages/requests/api.py", line 59, in > > request > > return session.request(method=method, url=url, **kwargs) > > ~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > > File "/app/lib/python3.13/site-packages/requests/sessions.py", line > > 587, in request > > resp = self.send(prep, **send_kwargs) > > File "/app/lib/python3.13/site-packages/requests/sessions.py", line > > 701, in send > > r = adapter.send(request, **kwargs) > > File "/app/lib/python3.13/site-packages/requests/adapters.py", line > > 460, in send > > self.cert_verify(conn, request.url, verify, cert) > > ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > > File "/app/lib/python3.13/site-packages/requests/adapters.py", line > > 263, in cert_verify > > raise OSError( > > ...<2 lines>... > > ) > > OSError: Could not find a suitable TLS CA certificate bundle, invalid > > path: /run/current-system/profile/etc/ssl/certs/ca-certificates.crt > > > > > > Roman > >
