René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Bug: AppImage injects bundled libs into system git's environment, breaking on modern distros","articleBody":"On Arch Linux (and likely other rolling-release distros), all git operations fail with:\n\n```\ngit: /tmp/appimage_extracted_.../usr/lib/libpcre2-8.so.0: no version information available (required by git)\ngit-remote-https: /tmp/appimage_extracted_.../usr/lib/libssl.so.3: version `OPENSSL_3.2.0' not found (required by /usr/lib/libcurl.so.4)\ngit-remote-https: /tmp/appimage_extracted_.../usr/lib/libssl.so.3: version `OPENSSL_3.5.0' not found (required by /usr/lib/libngtcp2_crypto_ossl.so.0)\nfatal: remote helper 'https' aborted session\n```\n\nThis practically means all sessions fail upon creation. I documented in [this comment](https://github.com/GitHubAppPrivatePreview/github-app/discussions/1#discussioncomment-16602928) in detail.\n\n**Root cause:** When the AppImage spawns git subprocesses, it passes its extracted lib directory (e.g. `/tmp/appimage_extracted_.../usr/lib`) via `LD_LIBRARY_PATH`. This causes the system git binary to load the AppImage's outdated bundled `libssl` and `libpcre2` instead of system ones, which on my Arch installation are incompatible.\n\n**Workaround:** Wrapping `/usr/bin/git` to strip AppImage paths from `LD_LIBRARY_PATH` before execution resolves the issue:\n```bash\nsudo mv /usr/bin/git /usr/bin/git.real\nsudo tee /usr/bin/git \u003c\u003c 'EOF'\n#!/bin/bash\nexport LD_LIBRARY_PATH=$(echo \"$LD_LIBRARY_PATH\" | tr ':' '\\n' | grep -v '/tmp/appimage' | tr '\\n' ':' | sed 's/:$//')\nexec /usr/bin/git.real \"$@\"\nEOF\nsudo chmod +x /usr/bin/git\n```\n\nI also needed to add additional flags:\n```\nAPPIMAGE_EXTRACT_AND_RUN=1  LD_PRELOAD=/usr/lib64/libwayland-client.so.0:/usr/lib64/libwayland-egl.so.1:/usr/lib64/libwayland-server.so.0:/usr/lib64/libwayland-cursor.so.0 ./GitHub-Copilot-linux-x64.appimage\n```\n\nThis workaround should not be required for general users. Suggested fixes:\n- Sanitize `LD_LIBRARY_PATH` before spawning git subprocesses\n- Bundle a fully self-contained git inside the AppImage\n- Launch git in a clean environment via `env -i`\n\n**Environment:**\n- OS: Arch Linux\n- Kernel: 7.0.10-zen1-1-zen\n- OpenSSL 3.6.2\n- App: GitHub Copilot AppImage (linux-x64)","author":{"url":"https://github.com/jmoseley","@type":"Person","name":"jmoseley"},"datePublished":"2026-06-02T18:14:40.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":4},"url":"https://github.com/644/app/issues/644"}