# Disable automatic macOS / App Store updates (an OTA update would also need
# the RestrictEvents kext to work in a VM)
{ ... }:
{
  name = "no-updates";
  script = ''
    SU="$DATA/Library/Preferences/com.apple.SoftwareUpdate.plist"
    for k in AutomaticCheckEnabled AutomaticDownload AutomaticallyInstallMacOSUpdates ConfigDataInstall CriticalUpdateInstall; do
      pe_plist_set "$SU" "$k" bool false
    done
    pe_plist_set "$DATA/Library/Preferences/com.apple.commerce.plist" AutoUpdate bool false
  '';
}