Libcurl error (60) in custom AppImage derivation for nvidia-omniverse

Hi everybody,

so I have build a custom nvidia-omniverse derivation since i requrie isaac-sim for my research for my PHD. I have gotten as far as being able to install and launch both nvidia-omnivere-launcher as well as being able to install and run isaac sim. However i run into some weird issues, because isaac-sim has a extension manager which tries to access a remote server to check whether all packages are up to date. That request seems to file due to libcurl error (60): SSL peer certificate or SSH remote key was not OK. Can anyone guess what the problem might be? Do i need to somehow pass certificates to the derivation? Is this an issue with it being an AppImage application? Interestingly enough, i can curl the path from my regular shell. Is this an issue on nvidias front? I think not because i this works normally when i use isaac-sim inside a docker image. That might be a workaround for the meantime, but the GUI is then only accessible through a remote streaming application, which creates other issues.

Here is the relevant part of the logs:

025-01-24 13:23:18 [19,710ms] [Info] [omni.ext.plugin] [ext: omni.kit.registry.nucleus-0.0.0] applying settings
2025-01-24 13:23:18 [19,712ms] [Info] [omni.ext.plugin] About to startup: [ext: omni.kit.registry.nucleus-0.0.0] (order: -1000) Triggered by API/CLI/Config. (path: /home/andre/.local/share/ov/pkg/isaac-sim-4.2.0/kit/extscore/omni.kit.registry.nucleus)
2025-01-24 13:23:18 [19,712ms] [Info] [omni.kit.app.plugin] [19.778s] [ext: omni.kit.registry.nucleus-0.0.0] startup
2025-01-24 13:23:18 [19,713ms] [Info] [omni.ext._impl.utils] -> func:_refresh_cache took: 0.0005s
2025-01-24 13:23:18 [19,719ms] [Info] [omni.ext._impl._internal] Searching for classes derived from 'omni.ext.IExt' in 'omni.kit.registry.nucleus' ('/home/andre/.local/share/ov/pkg/isaac-sim-4.2.0/kit/extscore/omni.kit.registry.nucleus')
2025-01-24 13:23:18 [19,719ms] [Info] [omni.ext._impl._internal] Found class `RegistryProviderExt` derived from `omni.ext.IExt` in module: 'omni.kit.registry.nucleus' in '/home/andre/.local/share/ov/pkg/isaac-sim-4.2.0/kit/extscore/omni.kit.registry.nucleus'. Calling `on_startup`.
2025-01-24 13:23:18 [19,719ms] [Info] [omni.kit.registry.nucleus.utils.common] global cache path: /home/andre/.local/share/ov/data/exts/v2
2025-01-24 13:23:18 [19,719ms] [Info] [omni.kit.registry.nucleus.registry_manager] 'trusted' is not set for registry 'kit/default' in '/exts/omni.kit.registry.nucleus/registries'
2025-01-24 13:23:18 [19,719ms] [Info] [omni.kit.registry.nucleus.utils.common] [kit/default] [v2] creating RegistryIndexV2(), index url: https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/v2, index local cache: /home/andre/.local/share/ov/data/exts/v2/index/242af5a8
2025-01-24 13:23:18 [19,719ms] [Info] [omni.kit.registry.nucleus.utils.common] [kit/default] [v1] creating RegistryIndexV1(), index url: https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/3
2025-01-24 13:23:18 [19,719ms] [Info] [omni.kit.registry.nucleus.registry_manager] 'trusted' is not set for registry 'kit/sdk' in '/exts/omni.kit.registry.nucleus/registries'
2025-01-24 13:23:18 [19,720ms] [Info] [omni.kit.registry.nucleus.utils.common] [kit/sdk] [v2] creating RegistryIndexV2(), index url: https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/v2, index local cache: /home/andre/.local/share/ov/data/exts/v2/index/b5aff599
2025-01-24 13:23:18 [19,720ms] [Info] [omni.kit.registry.nucleus.utils.common] [kit/sdk] [v1] creating RegistryIndexV1(), index url: https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/3
2025-01-24 13:23:18 [19,720ms] [Info] [omni.kit.registry.nucleus.registry_manager] 'trusted' is not set for registry 'kit/community' in '/exts/omni.kit.registry.nucleus/registries'
2025-01-24 13:23:18 [19,720ms] [Info] [omni.kit.registry.nucleus.utils.common] [kit/community] [v2] creating RegistryIndexV2(), index url: https://dw290v42wisod.cloudfront.net/exts/kit/community/v2, index local cache: /home/andre/.local/share/ov/data/exts/v2/index/f6f0b2d0
2025-01-24 13:23:18 [19,720ms] [Info] [omni.kit.registry.nucleus.utils.common] [kit/community] [v1] creating RegistryIndexV1(), index url: https://dw290v42wisod.cloudfront.net/exts/kit/community/3
2025-01-24 13:23:18 [19,720ms] [Info] [omni.ext.plugin] [ext: omni.kit.registry.nucleus-0.0.0] started, startup time: 7 (ms)
2025-01-24 13:23:18 [19,766ms] [Info] [omni.kit.registry.nucleus.utils.common] [kit/community] [v2] refresh_index() -> started.
2025-01-24 13:23:18 [19,766ms] [Info] [omni.kit.registry.nucleus.index_v2.index_sync] trying to take index_sync lock on: /home/andre/.local/share/ov/data/exts/v2/index/f6f0b2d0/registry.lock
2025-01-24 13:23:18 [19,766ms] [Info] [omni.kit.registry.nucleus.utils.common] [kit/community] [v1] refresh_index() -> started.
2025-01-24 13:23:18 [19,766ms] [Info] [omni.kit.registry.nucleus.utils.common] [kit/default] [v2] refresh_index() -> started.
2025-01-24 13:23:18 [19,767ms] [Info] [omni.kit.registry.nucleus.index_v2.index_sync] trying to take index_sync lock on: /home/andre/.local/share/ov/data/exts/v2/index/242af5a8/registry.lock
2025-01-24 13:23:18 [19,767ms] [Info] [omni.kit.registry.nucleus.index_v2.registry_file] Local registry index not found: /home/andre/.local/share/ov/data/exts/v2/index/f6f0b2d0/registry.json. First time syncing.
2025-01-24 13:23:18 [19,767ms] [Info] [omni.kit.registry.nucleus.utils.omni_client_utils] omni.client.read_file: https://dw290v42wisod.cloudfront.net/exts/kit/community/v2/registry.gz
2025-01-24 13:23:18 [19,767ms] [Info] [omni.kit.registry.nucleus.utils.common] [kit/default] [v1] refresh_index() -> started.
2025-01-24 13:23:18 [19,767ms] [Info] [omni.kit.registry.nucleus.utils.common] [kit/sdk] [v2] refresh_index() -> started.
2025-01-24 13:23:18 [19,767ms] [Info] [carb.omniclient.plugin]  185310: provider_http: Successfully created S3 provider for https://dw290v42wisod.cloudfront.net
2025-01-24 13:23:18 [19,767ms] [Info] [omni.kit.registry.nucleus.index_v2.registry_file] Local registry index not found: /home/andre/.local/share/ov/data/exts/v2/index/242af5a8/registry.json. First time syncing.
2025-01-24 13:23:18 [19,767ms] [Info] [omni.kit.registry.nucleus.utils.omni_client_utils] omni.client.read_file: https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/v2/registry.gz
2025-01-24 13:23:18 [19,767ms] [Info] [carb.omniclient.plugin]  185311: provider_http: Successfully created Azure provider for https://ovextensionsprod.blob.core.windows.net
2025-01-24 13:23:18 [19,767ms] [Info] [omni.kit.registry.nucleus.index_v2.index_sync] trying to take index_sync lock on: /home/andre/.local/share/ov/data/exts/v2/index/b5aff599/registry.lock
2025-01-24 13:23:18 [19,767ms] [Info] [omni.kit.registry.nucleus.utils.common] [kit/sdk] [v1] refresh_index() -> started.
2025-01-24 13:23:18 [19,767ms] [Info] [omni.kit.registry.nucleus.index_v2.registry_file] Local registry index not found: /home/andre/.local/share/ov/data/exts/v2/index/b5aff599/registry.json. First time syncing.
2025-01-24 13:23:18 [19,767ms] [Info] [omni.kit.registry.nucleus.utils.omni_client_utils] omni.client.read_file: https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/v2/registry.gz
2025-01-24 13:23:18 [19,820ms] [Info] [omni.kit.registry.nucleus.utils.omni_client_utils] omni.client.stat async: https://dw290v42wisod.cloudfront.net/exts/kit/community/3/index.zip
2025-01-24 13:23:18 [19,820ms] [Info] [omni.kit.registry.nucleus.utils.omni_client_utils] omni.client.stat async: https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/3/index.zip
2025-01-24 13:23:18 [19,820ms] [Info] [omni.kit.registry.nucleus.utils.omni_client_utils] omni.client.stat async: https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/3/index.zip
2025-01-24 13:23:18 [19,860ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/.cloudfront.toml
2025-01-24 13:23:18 [20,057ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/.cloudfront.toml
2025-01-24 13:23:18 [20,362ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/v2/registry.gz
2025-01-24 13:23:18 [20,362ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts?comp=list&delimiter=%2F&prefix=&restype=container
2025-01-24 13:23:18 [20,364ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/v2/registry.gz
2025-01-24 13:23:18 [20,405ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/.cloudfront.toml
2025-01-24 13:23:19 [20,893ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/.cloudfront.toml
2025-01-24 13:23:19 [20,929ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/.cloudfront.toml
2025-01-24 13:23:19 [21,022ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/v2/registry.gz
2025-01-24 13:23:19 [21,029ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/v2/registry.gz
2025-01-24 13:23:19 [21,029ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts?comp=list&delimiter=%2F&prefix=&restype=container
2025-01-24 13:23:19 [21,167ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/.cloudfront.toml
2025-01-24 13:23:19 [21,379ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/.cloudfront.toml
2025-01-24 13:23:20 [21,687ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/v2/registry.gz
2025-01-24 13:23:20 [21,781ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/v2/registry.gz
2025-01-24 13:23:20 [21,848ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts?comp=list&delimiter=%2F&prefix=&restype=container
2025-01-24 13:23:21 [22,993ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/.cloudfront.toml
2025-01-24 13:23:21 [22,993ms] [Info] [carb.omniclient.plugin]  Tick: provider_http: Read failed! Error: Connection. URI='https://dw290v42wisod.cloudfront.net/.cloudfront.toml': Unable to connect to server! Likely indicates a client side networking error or problem with Omniverse Cache!
2025-01-24 13:23:21 [23,036ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/v2/registry.gz
2025-01-24 13:23:21 [23,036ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/3/index.zip
2025-01-24 13:23:21 [23,173ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/3/index.zip
2025-01-24 13:23:21 [23,173ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/v2/registry.gz
2025-01-24 13:23:22 [23,473ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/v2/registry.gz
2025-01-24 13:23:22 [23,475ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts?comp=list&delimiter=%2F&prefix=&restype=container
2025-01-24 13:23:22 [23,478ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/v2/registry.gz
2025-01-24 13:23:22 [23,519ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/3/index.zip
2025-01-24 13:23:22 [23,521ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/v2/registry.gz
2025-01-24 13:23:22 [23,995ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/v2/registry.gz
2025-01-24 13:23:22 [24,001ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts?comp=list&delimiter=%2F&prefix=&restype=container
2025-01-24 13:23:22 [24,003ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/v2/registry.gz
2025-01-24 13:23:22 [24,035ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/3/index.zip
2025-01-24 13:23:22 [24,074ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/3/index.zip
2025-01-24 13:23:22 [24,223ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/3/index.zip
2025-01-24 13:23:22 [24,226ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/v2/registry.gz
2025-01-24 13:23:22 [24,263ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/v2/registry.gz
2025-01-24 13:23:22 [24,384ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/v2/registry.gz
2025-01-24 13:23:23 [24,528ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/3/index.zip
2025-01-24 13:23:23 [24,671ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/v2/registry.gz
2025-01-24 13:23:23 [24,681ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts?comp=list&delimiter=%2F&prefix=&restype=container
2025-01-24 13:23:23 [24,694ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/v2/registry.gz
2025-01-24 13:23:23 [24,694ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/v2/registry.gz
2025-01-24 13:23:24 [25,841ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/v2/registry.gz
2025-01-24 13:23:24 [25,841ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/3/index.zip
2025-01-24 13:23:24 [25,842ms] [Info] [carb.omniclient.plugin]  Tick: provider_http: Read failed! Error: Connection. URI='https://dw290v42wisod.cloudfront.net/exts/kit/community/v2/registry.gz': Unable to connect to server! Likely indicates a client side networking error or problem with Omniverse Cache!
2025-01-24 13:23:24 [25,842ms] [Info] [carb.omniclient.plugin]  Tick: provider_http: Stat failed! Error: Connection. URI='https://dw290v42wisod.cloudfront.net/exts/kit/community/3/index.zip': Unable to connect to server! Likely indicates a client side networking error or problem with Omniverse Cache!
2025-01-24 13:23:24 [25,842ms] [Info] [omni.kit.registry.nucleus.utils.omni_client_utils] read_file result: Result.ERROR_CONNECTION
2025-01-24 13:23:24 [25,844ms] [Info] [omni.kit.registry.nucleus.utils.omni_client_utils] stat async result: Result.ERROR_CONNECTION
2025-01-24 13:23:24 [25,844ms] [Info] [omni.kit.registry.nucleus.utils.omni_client_utils] omni.client.stat async: https://dw290v42wisod.cloudfront.net/exts/kit/community/3/index.json
2025-01-24 13:23:24 [25,846ms] [Error] [omni.kit.registry.nucleus.index_v2.index_sync] Syncing registry index failed for url: 'https://dw290v42wisod.cloudfront.net/exts/kit/community/v2'. Exception: Failed to connect to the registry: 'https://dw290v42wisod.cloudfront.net/exts/kit/community/v2'
2025-01-24 13:23:24 [25,851ms] [Info] [omni.kit.registry.nucleus.utils.common] [kit/community] [v2] refresh_index() -> failure.
2025-01-24 13:23:24 [25,883ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/3/index.json
2025-01-24 13:23:24 [26,184ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/3/index.json
2025-01-24 13:23:24 [26,320ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/v2/registry.gz
2025-01-24 13:23:24 [26,320ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/v2/registry.gz
2025-01-24 13:23:24 [26,320ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts?comp=list&delimiter=%2F&prefix=&restype=container
2025-01-24 13:23:26 [27,470ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/3/index.json
2025-01-24 13:23:26 [27,808ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/3/index.json
2025-01-24 13:23:26 [27,939ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/v2/registry.gz
2025-01-24 13:23:26 [27,939ms] [Info] [carb.omniclient.plugin]  Tick: provider_http: Read failed! Error: Connection. URI='https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/v2/registry.gz': Unable to connect to server! Likely indicates a client side networking error or problem with Omniverse Cache!
2025-01-24 13:23:26 [27,939ms] [Info] [omni.kit.registry.nucleus.utils.omni_client_utils] read_file result: Result.ERROR_CONNECTION
2025-01-24 13:23:26 [27,940ms] [Error] [omni.kit.registry.nucleus.index_v2.index_sync] Syncing registry index failed for url: 'https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/v2'. Exception: Failed to connect to the registry: 'https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/v2'
2025-01-24 13:23:26 [27,940ms] [Info] [omni.kit.registry.nucleus.utils.common] [kit/default] [v2] refresh_index() -> failure.
2025-01-24 13:23:26 [27,940ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/v2/registry.gz
2025-01-24 13:23:26 [27,940ms] [Info] [carb.omniclient.plugin]  Tick: provider_http: Read failed! Error: Connection. URI='https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/v2/registry.gz': Unable to connect to server! Likely indicates a client side networking error or problem with Omniverse Cache!
2025-01-24 13:23:26 [27,941ms] [Info] [omni.kit.registry.nucleus.utils.omni_client_utils] read_file result: Result.ERROR_CONNECTION
2025-01-24 13:23:26 [27,941ms] [Error] [omni.kit.registry.nucleus.index_v2.index_sync] Syncing registry index failed for url: 'https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/v2'. Exception: Failed to connect to the registry: 'https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/v2'
2025-01-24 13:23:26 [27,943ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts?comp=list&delimiter=%2F&prefix=&restype=container
2025-01-24 13:23:26 [27,943ms] [Info] [carb.omniclient.plugin]  Tick: provider_http: List failed! Error: Connection. URI='https://ovextensionsprod.blob.core.windows.net/exts?comp=list&delimiter=%2F&prefix=&restype=container': Unable to connect to server! Likely indicates a client side networking error or problem with Omniverse Cache!
2025-01-24 13:23:26 [27,947ms] [Info] [omni.kit.registry.nucleus.utils.common] [kit/sdk] [v2] refresh_index() -> failure.
2025-01-24 13:23:27 [28,468ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/3/index.zip
2025-01-24 13:23:27 [28,469ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/3/index.zip
2025-01-24 13:23:27 [28,615ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/3/index.json
2025-01-24 13:23:27 [29,072ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/3/index.zip
2025-01-24 13:23:27 [29,097ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/3/index.zip
2025-01-24 13:23:29 [30,585ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/3/index.json
2025-01-24 13:23:29 [30,720ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/3/index.zip
2025-01-24 13:23:29 [30,720ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/3/index.zip
2025-01-24 13:23:30 [32,334ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/3/index.zip
2025-01-24 13:23:30 [32,334ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/3/index.zip
2025-01-24 13:23:31 [32,854ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/3/index.zip
2025-01-24 13:23:31 [32,854ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/3/index.zip
2025-01-24 13:23:32 [33,484ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/3/index.zip
2025-01-24 13:23:32 [33,581ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/3/index.zip
2025-01-24 13:23:33 [34,733ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://dw290v42wisod.cloudfront.net/exts/kit/community/3/index.json
2025-01-24 13:23:33 [35,189ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/106/shared/3/index.zip
2025-01-24 13:23:33 [35,197ms] [Info] [carb.omniclient.plugin]  HTTP Client: http: libcurl error (60): SSL peer certificate or SSH remote key was not OK for https://ovextensionsprod.blob.core.windows.net/exts/kit/prod/sdk/106.1/10a4b5c0/3/index.zip

And here is my derivation:

{pkgs, ...}:
let
  pname = "omniverse-launcher";
  version = "1.0.0";

  src = pkgs.fetchurl {
    url = "https://install.launcher.omniverse.nvidia.com/installers/omniverse-launcher-linux.AppImage";
    hash = "sha256-ybw8hTLiq+7RNr6YTHq+1W0WR6naWHIyrmo0tSCvojg=";
  };

  appimageContents = pkgs.appimageTools.extract { inherit pname src; };

  desktopEntry = {
    name = "kartoffel";
    exec = "omniverse-launcher %U";
    terminal = false;
    categories = ["Application"];
  };

  omniverse-launcher-desktop = pkgs.writeText "omniverse-launcher.desktop" ''
    [Desktop Entry]
    Exec=omniverse-launcher %u
    Terminal=false
    Type=Application
    Name=omniverse-launcher
    MimeType=x-scheme-handler/omniverse-launcher
  '';
in
pkgs.appimageTools.wrapType2 rec {
  inherit pname version src;
  
  desktopItems = [
    (pkgs.makeDesktopItem desktopEntry)
  ];

  xdg.desktopEntries.omniverse-launcher = desktopEntry;

  environment.variables = {
    CURL_CA_BUNDLE = "/etc/pki/tls/certs/ca-bundle.crt";
  };

  extraInstallCommands = ''
    mkdir -p $out/share/applications
    ln -s ${omniverse-launcher-desktop} $out/share/applications/omniverse-launcher.desktop
  '';

  extraPkgs = pkgs: with pkgs; [
    icu
    cacert
    
    # omniverse-launcher runs lshw on startup
    lshw

    # Libraries specifically found using ldd and nix-locate on the python binary inside isaac sim
    libxcrypt-legacy
    glibc_multi

    # Libraries after isaac-sim install, looking through the logs
    libGL
    xorg.libX11
    xorg.libXi
    xorg.libXrandr.out

    # libraries from the nix tutorial on using python with dynamically linked libraries
    zlib
    zstd
    stdenv.cc.cc
    curl
    openssl
    attr
    libssh
    bzip2
    libxml2
    acl
    libsodium
    util-linux
    xz
    systemd
  ];

  meta = {
    description = "Nvidia Omniverse Launcher";
    homepage = "https://www.nvidia.com/en-us/omniverse/";
    downloadPage = "https://developer.nvidia.com/omniverse#section-getting-started";
    platforms = [ "x86_64-linux" ];
  };
}

Figured it out. So the way i set the enviroment variable did not really work. I am not enough of a nix wizard to understand why. However, that was the wrong environment variable any way. Anyway, this now works:

{pkgs, ...}:
let
  pname = "omniverse-launcher";
  version = "1.0.0";

  src = pkgs.fetchurl {
    url = "https://install.launcher.omniverse.nvidia.com/installers/omniverse-launcher-linux.AppImage";
    hash = "sha256-ybw8hTLiq+7RNr6YTHq+1W0WR6naWHIyrmo0tSCvojg=";
  };

  appimageContents = pkgs.appimageTools.extract { inherit pname src; };

  desktopEntry = {
    name = "omniverse-launcher";
    exec = "omniverse-launcher %U";
    terminal = false;
    categories = ["Application"];
  };

  omniverse-launcher-desktop = pkgs.writeText "omniverse-launcher.desktop" ''
    [Desktop Entry]
    Exec=omniverse-launcher %u
    Terminal=false
    Type=Application
    Name=omniverse-launcher
    MimeType=x-scheme-handler/omniverse-launcher
  '';
in
pkgs.appimageTools.wrapType2 rec {
  inherit pname version src;
  
  desktopItems = [
    (pkgs.makeDesktopItem desktopEntry)
  ];

  xdg.desktopEntries.omniverse-launcher = desktopEntry;
  
  nativeBuildInputs = [ pkgs.makeWrapper];

  extraInstallCommands = ''
    mkdir -p $out/share/applications
    ln -s ${omniverse-launcher-desktop} $out/share/applications/omniverse-launcher.desktop
    wrapProgram $out/bin/omniverse-launcher --set SSL_CERT_FILE "/etc/pki/tls/certs/ca-bundle.crt"
  '';

  extraPkgs = pkgs: with pkgs; [
    icu
    
    # omniverse-launcher runs lshw on startup
    lshw

    # Libraries specifically found using ldd and nix-locate on the python binary inside isaac sim
    libxcrypt-legacy
    glibc_multi

    # Libraries after isaac-sim install, looking through the logs
    libGL
    xorg.libX11
    xorg.libXi
    xorg.libXrandr.out

    # libraries from the nix tutorial on using python with dynamically linked libraries
    zlib
    zstd
    stdenv.cc.cc
    curl
    openssl
    attr
    libssh
    bzip2
    libxml2
    acl
    libsodium
    util-linux
    xz
    systemd
  ];

  meta = {
    description = "Nvidia Omniverse Launcher";
    homepage = "https://www.nvidia.com/en-us/omniverse/";
    downloadPage = "https://developer.nvidia.com/omniverse#section-getting-started";
    platforms = [ "x86_64-linux" ];
  };
}