Librewolf Marked as Insecure

Help
21

Yes, but note that this topic is outdated. librewolf is being kept up to date currently.

5 Likes
22

huh, I still get an error when I try to update the system

$ sudo nixos-rebuild switch --upgrade-all
unpacking 2 channels…
unpacking 2 channels…
building the system configuration…
error:
… while calling the ‘head’ builtin
at /nix/store/l7wvb6rqjjxidjdk9yv9p1a075lvjhq9-nixos-25.11/nixos/lib/attrsets.nix:1696:13:
1695|           if length values == 1 || pred here (elemAt values 1) (head values) then
1696|             head values
|             ^
1697|           else


   … while evaluating the attribute 'value'
     at /nix/store/l7wvb6rqjjxidjdk9yv9p1a075lvjhq9-nixos-25.11/nixos/lib/modules.nix:1118:7:
     1117|     // {
     1118|       value = addErrorContext "while evaluating the option `${showOption loc}':" value;
         |       ^
     1119|       inherit (res.defsFinal') highestPrio;

   … while evaluating the option `system.build.toplevel':

   … while evaluating definitions from `/nix/store/l7wvb6rqjjxidjdk9yv9p1a075lvjhq9-nixos-25.11/nixos/nixos/modules/system/activation/top-level.nix':

   … while evaluating the option `system.systemBuilderArgs':

   … while evaluating definitions from `/nix/store/l7wvb6rqjjxidjdk9yv9p1a075lvjhq9-nixos-25.11/nixos/nixos/modules/system/activation/activatable-system.nix':

   … while evaluating the option `system.activationScripts.etc.text':

   … while evaluating definitions from `/nix/store/l7wvb6rqjjxidjdk9yv9p1a075lvjhq9-nixos-25.11/nixos/nixos/modules/system/etc/etc-activation.nix':

   … while evaluating definitions from `/nix/store/l7wvb6rqjjxidjdk9yv9p1a075lvjhq9-nixos-25.11/nixos/nixos/modules/system/etc/etc.nix':

   … while evaluating the option `environment.etc."profiles/per-user/ammar".source':

   (stack trace truncated; use '--show-trace' to show the full, detailed trace)

   error: Package ‘librewolf-152.0.2-1’ in /nix/store/l7wvb6rqjjxidjdk9yv9p1a075lvjhq9-nixos-25.11/nixos/pkgs/applications/networking/browsers/firefox/wrapper.nix:577 is marked as insecure, refusing to evaluate.


   Known issues:
    - librewolf lacks an active committer in nixpkgs, consider using an alternative

   You can install it anyway by allowing this package, using the
   following methods:

   a) To temporarily allow all insecure packages, you can use an environment
      variable for a single invocation of the nix tools:

        $ export NIXPKGS_ALLOW_INSECURE=1

      Note: When using `nix shell`, `nix build`, `nix develop`, etc with a flake,
            then pass `--impure` in order to allow use of environment variables.

   b) for `nixos-rebuild` you can add ‘librewolf-152.0.2-1’ to
      `nixpkgs.config.permittedInsecurePackages` in the configuration.nix,
      like so:

        {
          nixpkgs.config.permittedInsecurePackages = [
            "librewolf-152.0.2-1"
          ];
        }

   c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
      ‘librewolf-152.0.2-1’ to `permittedInsecurePackages` in
      ~/.config/nixpkgs/config.nix, like so:

        {
          permittedInsecurePackages = [
            "librewolf-152.0.2-1"
          ];
        }


Command ‘nix-build ‘<nixpkgs/nixos>’ --attr config.system.build.toplevel --no-out-link’ returned non-zero exit status 1.
23

Your channel is outdated, so update that first.

24

I thought --upgrade handles updating channels automatically? anyways I tried again after sudo nix-channel --update and it’s the same output

25

That one is dead already. The only maintained stable is 26.05 currently. (and there’s unstable, too)

3 Likes
26

No, it only updates one channel (root’s nixos channel), while --upgrade-all updates all of them. But yeah you need to be using 26.05, I missed the 25.11 mentioned there. Releases are in Year.Month format, and you had the month after that to upgrade. After July 2026, 25.11 was no longer supported.

Similar steps to below:

(But replace 24.11 with 26.05 obviously.)

And do not touch stateVersion in your config. Ever.

1 Like
27

thanks a lot, I didn’t know I have to manually upgrade the channel version, but now I know hehe! <3

1 Like