Tropy requests the following restricted permissions:
- Filesystem: we use access to home
/media
and /run/media
because Tropy needs access to all files in a Tropy project.
- Wayland: since 1.16 we use --socket=wayland
and --socket=fallback-x11
- Network: we use --share=network
because Tropy needs to fetch remote images if you import them by pasting a URL.
- WebGL: --device=dri
is required becuase Tropy's image viewer needs access to the GPU.
- Fetch and unpack the Tropy sources outside of the sandbox
- Run `flatpak-node-generator --electron-node-headers --electron-ffmpeg=lib npm package-lock.json`
- Fix node-gyp cache install version from 9 to 11
- Fix electron cache link to SHASUMS256.txt