From 3b7139e09a6f843cc3d91629daebbaa65e585250 Mon Sep 17 00:00:00 2001
From: Don Harper <duck@duckland.org>
Date: Wed, 6 May 2026 17:51:12 -0500
Subject: [PATCH] allow citrix to install

---
 home/work/citrix.nix | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/home/work/citrix.nix b/home/work/citrix.nix
index 9a285ff..b732a19 100644
--- a/home/work/citrix.nix
+++ b/home/work/citrix.nix
@@ -7,16 +7,21 @@ with lib; let
       allowUnfree = true;
       allowInsecure = true;
       permittedInsecurePackages = ["libsoup-2.74.3"];
+      allowInsecurePredicate = pkg:
+        builtins.elem (lib.getName pkg) ["libsoup-2.74.3"];
     };
   };
 in {
   options.roles.citrix = {enable = lib.mkEnableOption "citrix tools";};
   config = mkIf cfg.enable {
-    home-manager.users.don.home.packages = with citrixPkgs; [citrix_workspace];
+    nixpkgs.config.permittedInsecurePackages = ["libsoup-2.74.3"];
+    home-manager.users.don.home.packages = with citrixPkgs; [ citrix_workspace ];
     home-manager.users.don.nixpkgs.config = {
       allowUnfree = true;
       allowInsecure = true;
       permittedInsecurePackages = ["libsoup-2.74.3"];
+      allowInsecurePredicate = pkg:
+        builtins.elem (lib.getName pkg) ["libsoup-2.74.3"];
     };
     home-manager.users.don.home.file."ICAClient" = {
       recursive = true;