# Disable automatic macOS / App Store updates (an OTA update would also need
# the RestrictEvents kext to work in a VM)
{ ... }:
{
  name = "no-updates";
  script = ''
    softwareupdate --schedule off || true
    defaults write /Library/Preferences/com.apple.SoftwareUpdate AutomaticCheckEnabled -bool false
    defaults write /Library/Preferences/com.apple.SoftwareUpdate AutomaticDownload -bool false
    defaults write /Library/Preferences/com.apple.SoftwareUpdate AutomaticallyInstallMacOSUpdates -bool false
    defaults write /Library/Preferences/com.apple.SoftwareUpdate ConfigDataInstall -bool false
    defaults write /Library/Preferences/com.apple.SoftwareUpdate CriticalUpdateInstall -bool false
    defaults write /Library/Preferences/com.apple.commerce AutoUpdate -bool false
  '';
}