Firefox widevine

nixos/hardware/apple-silicon-linux/default.nix

@@ -1,9 +1,21 @@
 {
   pkgs,
   lib,
+  inputs,
   ...
 }: let
+pkgs-master = import inputs.nixpkgs-master {
+  inherit (pkgs) system;
+  config.allowUnfree = true;
+};
 in {
+nixpkgs = {
+    overlays = [
+      (self: super: {
+        widevine-cdm = pkgs-master.widevine-cdm;
+      })
+    ];
+  };
   #nixpkgs.overlays = [
   #    (import ./widevine-overlay.nix)
   #];
@@ -11,6 +23,17 @@ in {
   imports = [
     #./apple-silicon-support
   ];
+programs.firefox.policies.Preferences = {
+  "media.gmp-widevinecdm.version" = "system-installed";
+  "media.gmp-widevinecdm.visible" = true;
+  "media.gmp-widevinecdm.enabled" = true;
+  "media.gmp-widevinecdm.autoupdate" = false;
+  "media.eme.enabled" = true;
+  "media.eme.encrypted-media-encryption-scheme.enabled" = true;
+};
+programs.firefox.autoConfig = ''
+// Zhu
+lockPref("general.useragent.override","Mozilla/5.0 (X11; CrOS aarch64 15236.80.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.5414.125 Safari/537.36");''; #doesn't work. You need to manually add this to about:config
   hardware.asahi = {
     peripheralFirmwareDirectory = ./firmware;
     useExperimentalGPUDriver = true; #deprecated

nixos/modules/firefox/aarch64-linux.nix

@@ -0,0 +1,19 @@
+{ pkgs, ... }:
+{
+ nixpkgs = {
+    overlays = [
+      (final: prev: {
+        firefox = prev.firefox.overrideAttrs (old: {
+          buildCommand =
+            old.buildCommand
+            + ''
+              mkdir -p $out/gmp-widevinecdm/system-installed
+              ln -s "${pkgs.widevine-cdm}/share/google/chrome/WidevineCdm/_platform_specific/linux_arm64/libwidevinecdm.so" $out/gmp-widevinecdm/system-installed/libwidevinecdm.so
+              ln -s "${pkgs.widevine-cdm}/share/google/chrome/WidevineCdm/manifest.json" $out/gmp-widevinecdm/system-installed/manifest.json
+              wrapProgram "$oldExe" \
+                      --set MOZ_GMP_PATH "$out/gmp-widevinecdm/system-installed"
+            '';
+        });
+    })];
+  };
+}

nixos/modules/firefox/default.nix

@@ -1,4 +1,4 @@
-{ config, pkgs, ... }:
+{ lib, config, pkgs, hwconfig, ... }:
 
   let
     lock-false = {
@@ -11,6 +11,7 @@
     };
   in
 {
+  imports = [] ++ lib.optional (hwconfig.system == "aarch64-linux") ./aarch64-linux.nix;
   programs = {
     firefox = {
       enable = true;