From 659e8e620ac8d0191f65a68db2058e4c6ee2a09d Mon Sep 17 00:00:00 2001
From: Ali Mirjamali <ali@mirjamali.com>
Date: Sat, 6 Sep 2025 02:10:51 +0330
Subject: [PATCH] Add flatpak update notification and auto proxy config

Automatic proxy config for flatpak in TemplateVMs.
Notify dom0 if system-wide (in TemplateVM) flatpaks are outdated.

A separate patch to `qubes-core-admin-linux` & `vmupdate` will enable
easy update of (in Template) flatpaks via the updater.

related: https://github.com/QubesOS/qubes-issues/issues/2766
---
 network/update-proxy-configs            | 23 +++++++++++++++++++++++
 package-managers/upgrades-status-notify |  4 ++++
 2 files changed, 27 insertions(+)

diff --git a/network/update-proxy-configs b/network/update-proxy-configs
index 3550b2372..16103a180 100755
--- a/network/update-proxy-configs
+++ b/network/update-proxy-configs
@@ -191,3 +191,26 @@ RSYNC_PROXY=\"${PROXY_ADDR_BASE}\""
         update_conf /etc/hosts ""
     fi
 fi
+
+# Flatpak
+if [ -f /usr/bin/flatpak ]; then
+    if [ -n "$PROXY_ADDR" ]; then
+        mkdir -p /run/qubes/bin
+        cat > /run/qubes/bin/flatpak <<EOF
+#!/bin/bash
+### This file is automatically generated by Qubes ($0 script).
+### All modifications here will be lost.
+all_proxy="$PROXY_ADDR" \\
+/usr/bin/flatpak "\$@"
+EOF
+        chmod +x /run/qubes/bin/flatpak
+        cat > /etc/profile.d/qubes-flatpak-proxy.sh << EOF
+### This file is automatically generated by Qubes ($0 script).
+### All modifications here will be lost.
+export PATH=/run/qubes/bin:\$PATH
+EOF
+    else
+        rm -f /run/qubes/bin/flatpak
+        rm -f /etc/profile.d/qubes-flatpak-proxy.sh
+    fi
+fi
diff --git a/package-managers/upgrades-status-notify b/package-managers/upgrades-status-notify
index 7a6e848bf..b75d26d5f 100755
--- a/package-managers/upgrades-status-notify
+++ b/package-managers/upgrades-status-notify
@@ -21,6 +21,10 @@ fi
 
 upgrades_installed="$(/usr/lib/qubes/upgrades-installed-check $script_arg)"
 
+if [ "$upgrades_installed" = "true" ] && [ -f "/usr/bin/flatpak" ] && [ -n "$(flatpak remote-ls --system --updates)" ]; then
+    upgrades_installed="false"
+fi
+
 if [ "$upgrades_installed" = "true" ]; then
     /usr/lib/qubes/qrexec-client-vm dom0 qubes.NotifyUpdates /bin/sh -c 'echo 0'
 elif [ "$upgrades_installed" = "false" ]; then