Flatpak install org.signal.Signal: Error: Permission denied

I’m trying to install Signal via Flatpak from Flathub, but it fails with a generic permission denied error and no other details. Does anybody have any ideas on how to solve this problem or even debug it? Thanks in advance for any ideas / suggestions.

Here’s the transcript:

$ flatpak -vv --ostree-verbose install --user flathub org.signal.Signal
F: Opening user flatpak installation at path /home/barnard/.local/share/flatpak
Looking for matches…
F: No installations directory in /etc/flatpak/installations.d. Skipping
F: Fetching summary file for remote ‘flathub’
F: Adding GPG keyring data from flathub.trustedkeys.gpg to verifier
F: GnuPG >= 2.1.17, skipping gpg-agent cleanup in /tmp/ostree-gpg-SSfM7v
F: Fetching summary file for remote ‘flathub’
F: Adding GPG keyring data from flathub.trustedkeys.gpg to verifier
F: GnuPG >= 2.1.17, skipping gpg-agent cleanup in /tmp/ostree-gpg-Udyxuw
F: Transaction: install flathub:app/org.signal.Signal/x86_64/stable[*]
F: Looking for remote metadata updates for flathub
F: marking op install:app/org.signal.Signal/x86_64/stable resolved to 0a13bd1bc332a90a9718c82d6ed1170ef0ffc4164be34cca4c1e694cb8243eeb
F: Updating dependent runtime runtime/org.freedesktop.Platform/x86_64/20.08
F: Transaction: update flathub:runtime/org.freedesktop.Platform/x86_64/20.08[$old]
F: marking op update:runtime/org.freedesktop.Platform/x86_64/20.08 resolved to 99666aa95651104a247e446309140c3641d0f43902240b57de11657a2fc1944f
F: Transaction: install/update flathub:runtime/org.freedesktop.Platform.GL.default/x86_64/20.08[*]
F: Transaction: install/update flathub:runtime/org.freedesktop.Platform.Locale/x86_64/20.08[/en]
F: Transaction: install/update flathub:runtime/org.freedesktop.Platform.openh264/x86_64/2.0[*]
F: marking op install/update:runtime/org.freedesktop.Platform.openh264/x86_64/2.0 resolved to 73f998362a6fc0d57e0c7e83e928d32b0ec14d10d0d94291033976bdcecc6b6b
F: marking op install/update:runtime/org.freedesktop.Platform.Locale/x86_64/20.08 resolved to e59956b0c9e66dbba44122d8130c3ef009d66b6259e20a29c4f6aa4347316238
F: marking op install/update:runtime/org.freedesktop.Platform.GL.default/x86_64/20.08 resolved to 82a8e234463fcb58ccd655b09dafbfe751ea785816c0927053f2a6a9a8fad73d

org.signal.Signal permissions:
    ipc	network	pulseaudio	x11
    devices	file access [1]	dbus access [2]	bus ownership [3]

    [1] xdg-desktop, xdg-documents, xdg-download, xdg-music, xdg-pictures,
        xdg-public-share, xdg-videos
    [2] org.freedesktop.Notifications, org.kde.StatusNotifierWatcher
    [3] org.kde.StatusNotifierItem-2-1


 1.	   	org.signal.Signal	stable	i	flathub	< 150.1 MB

Proceed with these changes to the user installation? [Y/n]: yes
Installing…                                                                   F: flatpak_dir_pull: Using commit 0a13bd1bc332a90a9718c82d6ed1170ef0ffc4164be34cca4c1e694cb8243eeb for pull of ref app/org.signal.Signal/x86_64/stable from remote flathub
F: Preparing transaction in repository 0x55c63bd8e2c0
F: Pushing lock non-blocking with timeout 30
F: Creating repo lock table
F: Opening repo lock file
F: Push lock: state=unlocked, depth=0
F: Locking repo shared
F: Using new tmpdir staging-58f97122-10a6-40ab-bb6c-2e9486b51a14-sVuDBb
F: Loaded flathub summary from cache
F: Adding GPG keyring data from flathub.trustedkeys.gpg to verifier
F: GnuPG >= 2.1.17, skipping gpg-agent cleanup in /tmp/ostree-gpg-iKbURx

Installing…                        0%  0 bytes/sF: starting fetch of 0a13bd1bc332a90a9718c82d6ed1170ef0ffc4164be34cca4c1e694cb8243eeb.commit (detached)
F: fetch of 0a13bd1bc332a90a9718c82d6ed1170ef0ffc4164be34cca4c1e694cb8243eeb.commit (detached) complete
F: _ostree_fetcher_should_retry_request: error: unset, n_retries_remaining: 5
F: Adding GPG keyring data from flathub.trustedkeys.gpg to verifier
F: GnuPG >= 2.1.17, skipping gpg-agent cleanup in /tmp/ostree-gpg-0FHe6x
F: pull: idle, exiting mainloop

Installing… ████████████████████ 100%F: Committing transaction in repository 0x55c63bd8e2c0
F: txn commit staging-58f97122-10a6-40ab-bb6c-2e9486b51a14-sVuDBb
F: Popping lock non-blocking with timeout 30
F: Pop lock: state=shared, depth=1
F: Unlocking repo
F: No checksum specified, getting tip of app/org.signal.Signal/x86_64/stable from origin flathub
F: tip resolved to: 0a13bd1bc332a90a9718c82d6ed1170ef0ffc4164be34cca4c1e694cb8243eeb
Error: Permission denied                                                        
F: Free lock: state=unlocked, depth=0
F: Closing repo lock file
F: Free lock table
error: Failed to install org.signal.Signal: Permission denied

I upgraded Flatpak from 1.2.5 to 1.8.2 to avoid a umask issue fixed in 1.3.3, but that did not appear to help. I also ran restorecon -Rv ~/.local, but that did not appear to help either.

Possibly relevant details:

$ umask
0077
$ uname -a
Linux <host> 5.8.18-300.fc33.x86_64 #1 SMP Mon Nov 2 19:09:05 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux

It turns out that some icons and their directories were owned by root (find ~/.local/share/flatpak -user root -or -group root). I seem to remember reading that there was some bug related to this in an older version of Flatpak. Fixing the ownership allows Flatpak to install Signal without further issues. (Note that running flatpak repair did not help.)

1 Like