Overview
Auryn needs specific Flatpak sandbox permissions to work correctly. Without them, network requests, file downloads, and config reads/writes will be blocked silently.
Depends on: #68 (manifest) being created first.
What needs to be done
Add the following to the manifest under finish-args:
Review for anything unnecessary and remove it.
Goal
The Auryn Flatpak has exactly the permissions it needs to function correctly — no broader access than required.
Related to: #30
Overview
Auryn needs specific Flatpak sandbox permissions to work correctly. Without them, network requests, file downloads, and config reads/writes will be blocked silently.
Depends on: #68 (manifest) being created first.
What needs to be done
Add the following to the manifest under
finish-args:--share=network— required for all downloads and API calls (lyrics, metadata, streamrip)--filesystem=xdg-music— to write downloaded tracks to the Music folder--filesystem=~/.config/qrip:create— to read/write app config and credentials--filesystem=~/.config/streamrip— to read/write streamrip's config (credentials injection)--socket=x11and--socket=wayland— required for the GTK3 UI to display--device=dri— for GPU-accelerated rendering (optional but recommended for GTK)Review for anything unnecessary and remove it.
Goal
The Auryn Flatpak has exactly the permissions it needs to function correctly — no broader access than required.
Related to: #30