Flatpak update asks for sudo password

Using Fedora 43 Gnome on Wayland.

When I do “flatpak update”, sometimes, not always, a gui prompt asking for my sudo password appears. Why is this happening? I’m a long time Fedora user, I only encountered this after I installed Fedora 43. I didn’t do a system upgrade, installed Fedora 43 fresh, but after that restored my home folder. Otherwise my system works perfectly.

Interesting. Is your user a wheel user? And how are your apps installed? System-wide or per-user?

EDIT: could be related to the fact that you’ve kept the home folder, and hence the keychain. Do you experience similar behavior with other apps too?

I don’t know what a wheel user is. I’m on a laptop, my user is the only user.
I install flatpaks as system-wide (i.e. I don’t use the --user option)
I want to stress that this doesn’t happen every time; it’s seemingly random.

This happened only with gnome-software too but I just uninstalled it after trying to troubleshoot it for a bit.

I agree that it has something to do with the keychain but couldn’t figure out.

Wheel user is a system user which belongs to the wheel group and has advanced privileges. The initial users created on Fedora are wheel users.

Do you have automatic login enabled? This thread might help.

I just disabled automatic login, changed my login password, re-enabled it. I hope this will solve. I will observe.

By the way, what did I do wrong when restoring the keychain at install time?

I’ve also seen this occasionally, and didn’t get to the bottom of the reason for it.

This was on Fedora 42, and for me I don’t think it’s recurred since upgrading to F43.

My user is in the wheel group and I don’t use autologin.

Did you restore the keyring as such, or just restored the home folder, which was already containing the login keyring? Did you use the same password as on your previous system?

It is a bit strange that you only get password prompt occasionally, but it might be that it only happens when the login keyring hasn’t been unlocked by other means. The keyring password and login password should match.

In other words, the key ring gets “used” while login and using the password once. If it asks you to enter the key-ring password again, you might have to change the password in seahorse

Especially if you use a home directory you copied from an other installation.

Otherwise it asks you to unlock it separately and that is maybe what the OP’s message is about.

As mentioned above, It has to be the same as in Seahorse saved.