Add glib-networking to Nix flake for WebKitGTK TLS support#454
Merged
AnthonyRonning merged 1 commit intomasterfrom Mar 4, 2026
Merged
Add glib-networking to Nix flake for WebKitGTK TLS support#454AnthonyRonning merged 1 commit intomasterfrom
AnthonyRonning merged 1 commit intomasterfrom
Conversation
WebKitGTK on Linux uses GLib's GIO for HTTPS networking. The Tauri binary links against Nix's glib, which looks for GIO modules in /nix/store paths. Without the TLS backend module (libgiognutls.so from glib-networking), all HTTPS fetch() calls fail with 'Load failed', causing attestation document fetches to fail during login. This adds glib-networking to the Linux dev shell packages and sets GIO_MODULE_DIR in the shell hook so WebKitGTK can find the TLS backend automatically. Co-Authored-By: tony@opensecret.cloud <TonyGiorgio@protonmail.com>
Contributor
Author
🤖 Devin AI EngineerI'll be helping with this pull request! Here's what you should know: ✅ I will automatically:
Note: I can only respond to comments from users who have write access to this repository. ⚙️ Control Options:
|
![devin-ai-integration[bot]](https://avatars.githubusercontent.com/in/811515?s=60&v=4){kind=small}
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Add glib-networking to Nix flake for WebKitGTK TLS support
Summary
Fixes the desktop app "Couldn't process attestation document: Load failed" error that occurs on Linux when running the Tauri debug build in Nix-based environments (VMs, CI, containers).
Root cause: WebKitGTK uses GLib's GIO networking stack for HTTPS. The Tauri binary links against Nix's
glib, which looks for GIO modules in/nix/storepaths — not the system/usr/lib. Withoutglib-networking(which provideslibgiognutls.so, the TLS backend), everyfetch()to an HTTPS URL silently fails with "Load failed", breaking attestation document fetches during login.Fix: Adds
pkgs.glib-networkingto the Linux dev shell packages and setsGIO_MODULE_DIRin the shell hook, following the same pattern as the existing Mesa/EGL configuration. Linux-only; macOS is unaffected.Review & Testing Checklist for Human
nix developon a Mac should still work — the change is gated behindpkgs.stdenv.isLinux)echo $GIO_MODULE_DIRpoints to a valid path containinglibgiognutls.sojust desktop-build-debug-no-ccthen launch the binary) and confirm login works without attestation errorsNotes