Installing extensions systemwide...

212 views
Skip to first unread message

Marco Gaiarin

unread,
Nov 12, 2020, 8:58:59 AM11/12/20
to tb-ent...@mozilla.org

I was used to install extensions systemwide, eg for:

https://addons.mozilla.org/it/thunderbird/addon/lookout-fix-version/?src=search

i do:
copy /y "lookout_fix_version-3.0.3.xpi" "%ProgramFiles%\Mozilla Thunderbird\extensions\lookout@s3_fix_version.xpi"


Moving to TB78 seems that this method works as expected, eg the
extensions above works as becfore.

But for this extension:

https://addons.thunderbird.net/en-us/thunderbird/addon/tbsync/

i do:
copy /y "tbsync-2.19.xpi" "%ProgramFiles%\Mozilla Thunderbird\extensions\tbs...@jobisoft.de.xpi"

and this extensions does not work, does even not appear in extensions
list.


Why?! Thanks.

--
dott. Marco Gaiarin GNUPG Key ID: 240A3D66
Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/
Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN)
marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797

Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
_____________________________________________________________________
Unsubscribe at: https://mail.mozilla.org/listinfo/tb-enterprise#subscribers <<<--- Unsubscribe
Reply to tb-enterprise mailing list at: tb-ent...@mozilla.org
Send questions about the list to: tb-enterp...@mozilla.org

Osdoba, Sascha

unread,
Nov 17, 2020, 6:55:59 AM11/17/20
to tb-ent...@mozilla.org
Hi Marco,

i am doing same but the xpi must be called: "tbs...@jobisoft.de.xpi"

I place tb-setup.exe and *.xpi to same folder and after installation copy all XPI:

xcopy "*.xpi" "%ProgramFiles(x86)%\Mozilla Thunderbird\extensions" /E /C /I /Q /H /Y

yes 32bit Thunderbird on 64bit Windows :)


works also with dav4t...@jobisoft.de.xpi , de...@dictionaries.addons.mozilla.org.xpi, eas4t...@jobisoft.de.xpi and marcoa...@mail.telepac.pt.xpi


-----Ursprüngliche Nachricht-----
Von: tb-enterprise <tb-enterpr...@mozilla.org> Im Auftrag von Marco Gaiarin
Gesendet: Donnerstag, 12. November 2020 14:59
An: tb-ent...@mozilla.org
Betreff: Installing extensions systemwide...

Marco Gaiarin

unread,
Nov 17, 2020, 9:47:24 AM11/17/20
to tb-ent...@mozilla.org
Mandi! Osdoba, Sascha
In chel di` si favelave...

> i am doing same but the xpi must be called: "tbs...@jobisoft.de.xpi"
> I place tb-setup.exe and *.xpi to same folder and after installation copy all XPI:
> xcopy "*.xpi" "%ProgramFiles(x86)%\Mozilla Thunderbird\extensions" /E /C /I /Q /H /Y

As just stated, i do more or less the same things (not on install time,
but via WPKG), so:

>> copy /y "tbsync-2.19.xpi" "%ProgramFiles%\Mozilla Thunderbird\extensions\tbs...@jobisoft.de.xpi"

> yes 32bit Thunderbird on 64bit Windows :)

Could be a 32/64 bit differences?! Seems really strange to me... but
i'll give it a try...


> works also with dav4t...@jobisoft.de.xpi , de...@dictionaries.addons.mozilla.org.xpi, eas4t...@jobisoft.de.xpi and marcoa...@mail.telepac.pt.xpi

As just stated also for me some extensions works, some other not; eg:

+ https://addons.thunderbird.net/it/thunderbird/addon/dizionario-italiano/
copy /y "dizionario_italiano-5.0.0.1webext.xpi" "%ProgramFiles%\Mozilla Thunderbird\extensions\it...@dictionaries.addons.mozilla.org.xpi"
WORKS

+ https://addons.mozilla.org/it/thunderbird/addon/lookout-fix-version/
copy /y "lookout_fix_version-3.0.3.xpi" "%ProgramFiles%\Mozilla Thunderbird\extensions\lookout@s3_fix_version.xpi"
WORKS

+ https://addons.mozilla.org/it/thunderbird/addon/provider-for-google-calendar/
copy /y "provider_for_google_calendar-78.0.1.xpi" "%ProgramFiles%\Mozilla Thunderbird\extensions\{a62ef8ec-5fdc-40c2-873c-223b8a6925cc}.xpi"
WORKS

+ https://addons.thunderbird.net/en-us/thunderbird/addon/tbsync/
copy /y "tbsync-2.19.xpi" "%ProgramFiles%\Mozilla Thunderbird\extensions\tbs...@jobisoft.de.xpi"
DOES NOT WORK

Boh...

Thomas Besser

unread,
Nov 17, 2020, 9:57:04 AM11/17/20
to tb-ent...@mozilla.org
Am 17.11.20 um 15:47 schrieb Marco Gaiarin:
>> i am doing same but the xpi must be called: "tbs...@jobisoft.de.xpi"
>> I place tb-setup.exe and *.xpi to same folder and after installation copy all XPI:
>> xcopy "*.xpi" "%ProgramFiles(x86)%\Mozilla Thunderbird\extensions" /E /C /I /Q /H /Y

Regarding the path above, I copying the extensions to
"$InstallDir$\distribution\extensions"

Regards
Thomas

--
Karlsruher Institut für Technologie (KIT)
archIT [IT-Management der Fakultät Architektur]
Dipl.-Ing. Thomas Besser
Gebäude 11.40, Raum 010 | Fon +49 721 608 46024
http://www.arch.kit.edu/fakultaet/it-management.php

KIT - Die Forschungsuniversität in der Helmholtz-Gemeinschaft

Kris Lou

unread,
Nov 17, 2020, 1:14:45 PM11/17/20
to tb-ent...@mozilla.org
Have you tried extracting the *.xpi and deploying that?

That's the way that I've always deployed extensions, though I haven't tested TB78.x as I'm waiting/hoping for a viable gContactSync replacement.


Marco Gaiarin

unread,
Nov 18, 2020, 9:41:34 AM11/18/20
to tb-ent...@mozilla.org
Mandi! Thomas Besser
In chel di` si favelave...

> Regarding the path above, I copying the extensions to
> "$InstallDir$\distribution\extensions"

It is not exactly the same; in this way extensions get loaded into the
new user profile at profile creation and update, but not 'managed':
user can uninstall them.


Mandi! Kris Lou
In chel di` si favelave...

> Have you tried extracting the *.xpi and deploying that?

It is a lot that extensions does not needed anymore to be unpacked!

Anyway, i've tried it, nothing changed.



In 'filefox-enterprise' list someone pint meto this sentences:

**As of version 78.0, "sideloaded" extensions are no longer supported. Enterprise administrators can deploy extensions using policies.

(from https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/).


I can confirm that: *ALL* extensions cannot be 'system installed' (or
sideloaded) anymore: the two that appear to be loaded was indeed also
user-installed (probably an old test of the extension lying around).


The only way to manage extensions is now policy.

Luca Olivetti

unread,
Mar 16, 2021, 7:11:33 AM3/16/21
to tb-ent...@mozilla.org
El 18/11/20 a les 15:41, Marco Gaiarin ha escrit:

>
> In 'filefox-enterprise' list someone pint meto this sentences:
>
> **As of version 78.0, "sideloaded" extensions are no longer supported. Enterprise administrators can deploy extensions using policies.
>
> (from https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/).
>
>
> I can confirm that: *ALL* extensions cannot be 'system installed' (or
> sideloaded) anymore: the two that appear to be loaded was indeed also
> user-installed (probably an old test of the extension lying around).
>
>
> The only way to manage extensions is now policy.

It has to be necessarily via gpo?

I tried both adding "Extensions" and "ExtensionSettings" stanzas to
policies.json and the extension didn't install. Policies.json is taken
into account (the "DisableAppUpdate" policy works).


{
"policies": {
"DisableAppUpdate": true,
"DisableTelemetry": true,
"EnableTrackingProtection": { "Value": true, "Locked": false},
"OfferToSaveLogins": true,
"ExtensionSettings": {
"sogo-co...@inverse.ca": {
"installation_mode": "force_installed",
"install_url": "https://wetron.es/sogo-co...@inverse.ca.xpi"
}
},
"Extensions": {
"Install":
["https://addons.mozilla.org/firefox/downloads/somefile.xpi",
"//path/to/xpi"],
"Uninstall": ["bad_ad...@mozilla.org"],
"Locked": ["https://wetron.es/sogo-co...@inverse.ca.xpi"]
}

}
}


Bye
--
Luca Olivetti
Wetron Automation Technology http://www.wetron.es/
Tel. +34 93 5883004 (Ext.3010) Fax +34 93 5883007

Marco Gaiarin

unread,
Mar 16, 2021, 9:40:10 AM3/16/21
to tb-ent...@mozilla.org
Mandi! Luca Olivetti
In chel di` si favelave...

> > The only way to manage extensions is now policy.
> It has to be necessarily via gpo?

I've not tried json policy, because i prefere tu have single recipes
that add 'confguration snippet', instead of a single json config file.

I use direct registry editing (that AFAIK works like GPO) so, i've no
answer...

--
dott. Marco Gaiarin GNUPG Key ID: 240A3D66
Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/
Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN)
marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797

Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)

Luca Olivetti

unread,
Mar 16, 2021, 11:36:17 AM3/16/21
to tb-ent...@mozilla.org
El 16/3/21 a les 14:36, Marco Gaiarin ha escrit:
> Mandi! Luca Olivetti
> In chel di` si favelave...
>
>>> The only way to manage extensions is now policy.
>> It has to be necessarily via gpo?
>
> I've not tried json policy, because i prefere tu have single recipes
> that add 'confguration snippet', instead of a single json config file.
>
> I use direct registry editing (that AFAIK works like GPO) so, i've no
> answer...

And does that work? If so a GPO should also work, but I'm not sure if
both policies.json and the GPOs can coexist.
Will it also update the extension if the xpi in the url has a new
version (in spite of having the same name)?
Frankly, I don't get why the perfectly functional (once correctly set
the autodisablescopes value) sideloading mechanism has been removed, it
was so much easier to just deploy thunderbird/firefox along with all the
extensions/dictionaries/language packs.

Bye
--
Luca Olivetti
Wetron Automation Technology http://www.wetron.es/
Tel. +34 93 5883004 (Ext.3010) Fax +34 93 5883007

Marco Gaiarin

unread,
Mar 16, 2021, 12:20:13 PM3/16/21
to tb-ent...@mozilla.org
Mandi! Luca Olivetti
In chel di` si favelave...

> And does that work? If so a GPO should also work, but I'm not sure if both
> policies.json and the GPOs can coexist.

Yes, it works. AFAIK in the policy documentation (probably FF, not TB)
there is a statement for the policy application, if i remember well
first GPO, then registry, the JSON, so json is the last and win.


> Will it also update the extension if the xpi in the url has a new version
> (in spite of having the same name)?

No. If i remember well there's no way to 'lock' upgrades, that are
automatic; eg, you can install a particular version extension, but
upgrades are off (globally) or automatic from extension's repository.


> Frankly, I don't get why the perfectly functional (once correctly set the
> autodisablescopes value) sideloading mechanism has been removed, it was so
> much easier to just deploy thunderbird/firefox along with all the
> extensions/dictionaries/language packs.

+1 . :-(

--
dott. Marco Gaiarin GNUPG Key ID: 240A3D66
Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/
Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN)
marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797

Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)

Dimas Streich (Informàtica ICS Girona)

unread,
Mar 17, 2021, 3:33:53 AM3/17/21
to tb-ent...@mozilla.org

Will it also update the extension if the xpi in the url has a new version
(in spite of having the same name)?
No. If i remember well there's no way to 'lock' upgrades, that are
automatic; eg, you can install a particular version extension, but
upgrades are off (globally) or automatic from extension's repository.
Since 78 ESR you can disable automatic updates and do a manual update via policy. If you set the new version url in ExtensionSettings the extension will be updated.
--

Dimas Streich Colomeda
Unitat de Tecnologies de la Informació i Comunicació

Departament de Salut | Generalitat de Catalunya
Av.França s/n | 17007 Girona 
dstreich....@gencat.cat | http://www.hospitaltrueta.cat
Instagram | Twitter | YouTube

Aquest missatge s'adreça exclusivament a la persona destinatària i pot contenir informació privilegiada o confidencial. Si no sou la persona destinatària indicada, us recordem que la utilització, divulgació i/o còpia sense autorització està prohibida en virtut de la legislació vigent. Si heu rebut aquest missatge per error, us demanem que ens ho feu saber immediatament per aquesta via i que el destruïu.

Luca Olivetti

unread,
Mar 17, 2021, 3:40:08 AM3/17/21
to tb-ent...@mozilla.org
El 17/3/21 a les 8:32, Dimas Streich (Informàtica ICS Girona) ha escrit:

>
>>> Will it also update the extension if the xpi in the url has a new version
>>> (in spite of having the same name)?
>> No. If i remember well there's no way to 'lock' upgrades, that are
>> automatic; eg, you can install a particular version extension, but
>> upgrades are off (globally) or automatic from extension's repository.
> Since 78 ESR you can disable automatic updates and do a manual update
> via policy. If you set the new version url in ExtensionSettings the
> extension will be updated.

So, is it enough to change the name of the xpi?

Bye
--
Luca Olivetti
Wetron Automation Technology http://www.wetron.es/
Tel. +34 93 5883004 (Ext.3010) Fax +34 93 5883007

Dimas Streich (Informàtica ICS Girona)

unread,
Mar 17, 2021, 3:57:05 AM3/17/21
to tb-ent...@mozilla.org
Yes, at it says in the policy templates documentation: "If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes."


El 17/3/2021 a les 8:40, Luca Olivetti ha escrit:
El 17/3/21 a les 8:32, Dimas Streich (Informàtica ICS Girona) ha escrit:

Will it also update the extension if the xpi in the url has a new version
(in spite of having the same name)?
No. If i remember well there's no way to 'lock' upgrades, that are
automatic; eg, you can install a particular version extension, but
upgrades are off (globally) or automatic from extension's repository.
Since 78 ESR you can disable automatic updates and do a manual update via policy. If you set the new version url in ExtensionSettings the extension will be updated.

So, is it enough to change the name of the xpi?

Bye

--

Luca Olivetti

unread,
Mar 17, 2021, 4:07:15 AM3/17/21
to tb-ent...@mozilla.org
El 17/3/21 a les 8:56, Dimas Streich (Informàtica ICS Girona) ha escrit:

> Yes, at it says in the policy templates documentation
> <https://github.com/mozilla/policy-templates#extensionsettings>: "If you
> need to update the extension, you can change the name of the extension
> and it will be automatically updated. Extensions installed from file
> URLs will additional be updated when their internal version changes."

OK, based on that same documentation, I put this snippet in
HKLM\Software\Policies\Thunderbird\ExtensionSettings

{
"sogo-co...@inverse.ca": {
"installation_mode": "force_installed",
"install_url": "https://wetron.es/sogo-co...@inverse.ca.xpi"
}
}


And I see this in the error console:

JsonSchemaValidator.jsm: Object expected but not received
JsonSchemaValidator.jsm:303
Enterprise Policies: Invalid parameters specified for ExtensionSettings.
EnterprisePolicies.js:161

Luca Olivetti

unread,
Mar 17, 2021, 4:11:31 AM3/17/21
to tb-ent...@mozilla.org
El 17/3/21 a les 9:07, Luca Olivetti ha escrit:

> El 17/3/21 a les 8:56, Dimas Streich (Informàtica ICS Girona) ha escrit:
>> Yes, at it says in the policy templates documentation
>> <https://github.com/mozilla/policy-templates#extensionsettings>: "If
>> you need to update the extension, you can change the name of the
>> extension and it will be automatically updated. Extensions installed
>> from file URLs will additional be updated when their internal version
>> changes."
>
> OK, based on that same documentation, I put this snippet in
> HKLM\Software\Policies\Thunderbird\ExtensionSettings
>
> {
>       "sogo-co...@inverse.ca": {
>         "installation_mode": "force_installed",
>         "install_url": "https://wetron.es/sogo-co...@inverse.ca.xpi"
>       }
> }
>
>
> And I see this in the error console:
>
> JsonSchemaValidator.jsm: Object expected but not received
> JsonSchemaValidator.jsm:303
> Enterprise Policies: Invalid parameters specified for ExtensionSettings.
> EnterprisePolicies.js:161

In fact I get the same error if I verbatim copy the example

{
"*": {
"blocked_install_message": "Custom error message.",
"install_sources": ["about:addons","https://addons.mozilla.org/"],
"installation_mode": "blocked",
"allowed_types": ["extension"]
},
"uBl...@raymondhill.net": {
"installation_mode": "force_installed",
"install_url":
"https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
},
"https-ev...@eff.org": {
"installation_mode": "allowed"

Luca Olivetti

unread,
Mar 17, 2021, 4:48:49 AM3/17/21
to tb-ent...@mozilla.org
El 17/3/21 a les 9:11, Luca Olivetti ha escrit:


I tried the same with firefox and it works[*], so I guess the feature is
broken in thunderbird.


[*] But it's not what I expected: I used this in the registry

{


"uBl...@raymondhill.net": {
"installation_mode": "force_installed",
"install_url":
"https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
}
}


and it installed the extension in my firefox profile.
I removed the xpi from there and it was *not* reinstalled until I
changed the url in the registry.

Thank you for removing a perfectly working mechanism and replacing it
with a more difficult and broken one.

Bye

Marco Gaiarin

unread,
Mar 17, 2021, 7:10:11 AM3/17/21
to tb-ent...@mozilla.org
Mandi! Dimas Streich (Informàtica ICS Girona)
In chel di` si favelave...

> Since 78 ESR you can disable automatic updates and do a manual update via
> policy. If you set the new version url in ExtensionSettings the extension will
> be updated.

...at the cost of disable globally extensions update, eg also
user-installed extensions are not updated.

So, if you have a very strict environment where users cannot install
extensions, could fit; but if you leave users to add their extensions,
then they have to upgrade it manually.

Dimas Streich (Informàtica ICS Girona)

unread,
Mar 17, 2021, 7:16:34 AM3/17/21
to tb-ent...@mozilla.org
This is true. Mike knows about that, you can follow a possible evolution here: https://bugzilla.mozilla.org/show_bug.cgi?id=1679826


El 17/3/2021 a les 12:07, Marco Gaiarin ha escrit:
Mandi! Dimas Streich (Informàtica ICS Girona)
  In chel di` si favelave...

Since 78 ESR you can disable automatic updates and do a manual update via
policy. If you set the new version url in ExtensionSettings the extension will
be updated.
...at the cost of disable globally extensions update, eg also
user-installed extensions are not updated.

So, if you have a very strict environment where users cannot install
extensions, could fit; but if you leave users to add their extensions,
then they have to upgrade it manually.


--

Luca Olivetti

unread,
Mar 23, 2021, 3:40:40 AM3/23/21
to tb-ent...@mozilla.org
El 17/3/21 a les 9:48, Luca Olivetti ha escrit:
> El 17/3/21 a les 9:11, Luca Olivetti ha escrit:
>
>
> I tried the same with firefox and it works[*], so I guess the feature is
> broken in thunderbird.

I filed a bug:

https://bugzilla.mozilla.org/show_bug.cgi?id=1700279
Reply all
Reply to author
Forward
0 new messages