flatpak-builder --install leads to "error: Flatpak system operation ConfigureRemote not allowed for user"

[mwleeds]

Linux distribution and version

Endless OS 3.6.0 and Fedora Silverblue 31

Flatpak-builder version

1.0.6 and 1.0.7

Flatpak version

1.4.0

Description of the problem

Using the --install option with flatpak-builder leads to an error (unless --user is used) instead of actually installing the flatpak.

Steps to reproduce

1. git clone https://github.com/flathub/org.kde.kwordquiz
2. cd org.kde.kwordquiz
3. flatpak-builder --force-clean --install --install-deps-from=flathub _build org.kde.kwordquiz.json At the end of the output is:

error: Flatpak system operation ConfigureRemote not allowed for user
Install failed: Child process exited with code 1

[mwleeds]

Looks like the ConfigureRemote operation being attempted is to add a kwordquiz-origin remote.

[mwleeds]

We're passing -y --noninteractive to the flatpak install command in builder-main.c. If I remove those I get an authentication prompt and then the install fails when there's no input to this prompt: Proceed with these changes to the Default system installation? [Y/n]: n

So I guess there are three options: we either

1. document that --install doesn't work with system installations that require authentication, or
2. change the rules in the system helper so that you don't need to authenticate to add an origin remote (which could pose a security risk), or
3. if flatpak-builder can be interactive, allow the authentication prompt through while still passing -y to flatpak install (which would require changes to how -y is interpreted).

[refi64]

Random thought, option 1 could be a bit inconsistent since of course it works if you're in the wheel group.

[mwleeds]

Random thought, option 1 could be a bit inconsistent since of course it works if you're in the wheel group.

No, by default even sudoers can't add a remote without authenticating. They can only install from existing remotes.

[refi64]

Hmm that's odd, I'm quite sure I've run flatpak-builder --install several times without needing to auth, unless it's changed since then or it's a Fedora-ism?

[mwleeds]

Did you mean --install?

[refi64]

Sorry, yeah.

[mwleeds]

There have been relatively recent changes to how Flatpak handles non-interactive installs, so it might be that you're not on 1.4.x

[Erick555]

@mwleeds I just hit the same issue. Did you found any workaround for installing flatpak system-wide?

[Erick555]

I ended up with creating bundle and installing it with flatpak install.

[gnumoksha]

I've added --user argument and it worked.

I'm running:

$ flatpak --version
Flatpak 1.6.2
$ flatpak-builder --version
flatpak-builder 1.0.9

[Erick555]

@gnumoksha yes, --user works but this issue is about system installations.

[Newbytee]

I ended up with creating bundle and installing it with flatpak install.

How did you do that?

[Erick555]

You need to use flatpak build-bundle command. See manpage for available options.