summary refs log tree commit diff
path: root/pkgs/applications/networking/browsers/firefox-bin/default.nix
diff options
context:
space:
mode:
authorCorey O'Connor <coreyoconnor@gmail.com>2018-09-25 11:12:33 -0700
committerCorey O'Connor <coreyoconnor@gmail.com>2018-10-03 07:22:49 -0700
commitba2fe3c9a626a8fb845c786383b8b23ad8355951 (patch)
treea228bfcecd83bc862b0c8bd3d7ffc9e733230741 /pkgs/applications/networking/browsers/firefox-bin/default.nix
parent13c300df6cddfffbe6de697ead663bdbf16ddd79 (diff)
downloadnixpkgs-ba2fe3c9a626a8fb845c786383b8b23ad8355951.tar
nixpkgs-ba2fe3c9a626a8fb845c786383b8b23ad8355951.tar.gz
nixpkgs-ba2fe3c9a626a8fb845c786383b8b23ad8355951.tar.bz2
nixpkgs-ba2fe3c9a626a8fb845c786383b8b23ad8355951.tar.lz
nixpkgs-ba2fe3c9a626a8fb845c786383b8b23ad8355951.tar.xz
nixpkgs-ba2fe3c9a626a8fb845c786383b8b23ad8355951.tar.zst
nixpkgs-ba2fe3c9a626a8fb845c786383b8b23ad8355951.zip
firefox: disable auto updates using distribution policies.
Resolves #33884
Diffstat (limited to 'pkgs/applications/networking/browsers/firefox-bin/default.nix')
-rw-r--r--pkgs/applications/networking/browsers/firefox-bin/default.nix11
1 files changed, 11 insertions, 0 deletions
diff --git a/pkgs/applications/networking/browsers/firefox-bin/default.nix b/pkgs/applications/networking/browsers/firefox-bin/default.nix
index 91aee7b1e8a..c81c7934985 100644
--- a/pkgs/applications/networking/browsers/firefox-bin/default.nix
+++ b/pkgs/applications/networking/browsers/firefox-bin/default.nix
@@ -42,6 +42,7 @@
 , channel
 , generated
 , writeScript
+, writeText
 , xidel
 , coreutils
 , gnused
@@ -69,6 +70,12 @@ let
 
   systemLocale = config.i18n.defaultLocale or "en-US";
 
+  policies = {
+    DisableAppUpdate = true;
+  };
+
+  policiesJson = writeText "no-update-firefox-policy.json" (builtins.toJSON { inherit policies; });
+
   defaultSource = stdenv.lib.findFirst (sourceMatches "en-US") {} sources;
 
   source = stdenv.lib.findFirst (sourceMatches systemLocale) defaultSource sources;
@@ -172,6 +179,10 @@ stdenv.mkDerivation {
       ln -s "$out/usr/lib" "$out/lib"
 
       gappsWrapperArgs+=(--argv0 "$out/bin/.firefox-wrapped")
+
+      # See: https://github.com/mozilla/policy-templates/blob/master/README.md
+      mkdir -p "$out/lib/firefox-bin-${version}/distribution";
+      ln -s ${policiesJson} "$out/lib/firefox-bin-${version}/distribution/policies.json";
     '';
 
   passthru.execdir = "/bin";