+++ This bug was initially created as a clone of Bug #821207 +++ This requires: 1. Removal of the marketplace-dev cert from Gecko's security/build. 2. Setting dom.mozApps.privileged_apps_installable_from to "https://marketplace.mozilla.org." 3. Removing the marketplace-dev app from Gaia.

Actually - you need a tad bit more than that. Let me update the title.

My understanding is that dpreston is working on a script called "customize.py" which will allow the builder of Gaia to set which apps are accessible on the device. I would like to modify that tool so that the builder of Gaia has the option of trusting or dis-trusting marketplace-dev and marketplace-staging. In the trusted case, the effect of this will be to copying pre-generated cert9.db, key4.db, pkcs11.txt files into output profile; in the untrusted case, those three files just wouldn't be copied into the profile.

Here is the first rough version of the tool: https://github.com/fzzzy/gaia/commit/c3da31f3254d4f13d32cf3795a981762e575d0e4 Feedback and suggestions welcome. I'll be getting it cleaned up and working on it more next week after Christmas.

No update in weeks. Owner is totally overloaded. Can we please load-balance here?

Donovan, what is the status of customize.py? Is there a bug for that that I can mark as blocking this bug?

I think if you do what you suggested in the email, marketplace-dev and staging could be added by customize in the future. I think you should go ahead and remove these and close this out for now.

Andrew said that somebody from the Gaia team was free to do this. All we have to do is delete the marketplace-dev and marketplace-staging apps from Gaia. There is already another bug on file to give the marketplace devs a script to hack marketplace-dev and marketplace-staging back into Gaia in their development builds. But, right now we probably shouldn't do this until we switch Gecko to trust the marketplace-prod cert instead of the marketplace-dev cert. (I.e. we should fix marketplace-prod before we break marketplace-dev.)

ochameau, can you review and merge this pull request?: https://github.com/mozilla-b2g/gaia/pull/7371

Landed: https://github.com/mozilla-b2g/gaia/commit/305551386ac564f540d4ba8c4e5a5ef7eb8fb7c9

Thanks Alexandre!

I can confirm that I'm no longer seeing dev or staging on device with the latest build.