Step 1: Review Your Packages

Step 2: Choose Your Integration Method

Step 3: Copy Your Script or Download Config

Option 1: Copy Script

Option 2: Download Config

Step 4: Setup Your Environment

1. Ensure you are set for organizational deployment

Please see the organizational deployment guide

2. Get the package into your environment

Option 1: Cached Package (Unreliable, Requires Internet - Same As Community)

Open Source or Commercial:
- Proxy Repository - Create a proxy nuget repository on Nexus, Artifactory Pro, or a proxy Chocolatey repository on ProGet. Point your upstream to https://community.chocolatey.org/api/v2/. Packages cache on first access automatically. Make sure your choco clients are using your proxy repository as a source and NOT the default community repository. See source command for more information.
- You can also just download the packages and push them to a repository
  Download Packages

Option 2: Internalized Package (Reliable, Scalable)

Open Source
- Download the packages:
  Download Packages
- Follow manual internalization instructions
Package Internalizer (C4B)
- Run: (additional options)
- For package and dependencies run:
- Automate package internalization

Step 5: Copy Your Script

See options you can pass to upgrade.

See best practices for scripting.

Add this to a PowerShell script or use a Batch script with tools and in places where you are calling directly to Chocolatey. If you are integrating, keep in mind enhanced exit codes.

If you do use a PowerShell script, use the following to ensure bad exit codes are shown as failures:

If Applicable - Chocolatey Configuration/Installation


## 1. REQUIREMENTS ##
### Here are the requirements necessary to ensure this is successful.

### a. Internal/Private Cloud Repository Set Up ###
#### You'll need an internal/private cloud repository you can use. These are
####  generally really quick to set up and there are quite a few options.
####  Chocolatey Software recommends Nexus, Artifactory Pro, or ProGet as they
####  are repository servers and will give you the ability to manage multiple
####  repositories and types from one server installation.

### b. Download Chocolatey Package and Put on Internal Repository ###
#### You need to have downloaded the Chocolatey package as well.
####  Please see https://chocolatey.org/install#organization

### c. Other Requirements ###

#### We initialize a few things that are needed by this script - there are no other requirements.
$ErrorActionPreference = "Stop"

#### Set TLS 1.2 (3072) as that is the minimum required by various up-to-date repositories.
#### Use integers because the enumeration value for TLS 1.2 won't exist
#### in .NET 4.0, even though they are addressable if .NET 4.5+ is
#### installed (.NET 4.5 is an in-place upgrade).
[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072

#### We use this variable for future REST calls.
$RequestArguments = @{
    UseBasicParsing = $true
}

## 2. TOP LEVEL VARIABLES ##

### a. Your internal repository url (the main one). ###
####  Should be similar to what you see when you browse
#### to https://community.chocolatey.org/api/v2/
$NugetRepositoryUrl = "INTERNAL REPO URL"

### b. Internal Repository Credential ###
#### If required, add the repository access credential here
# $NugetRepositoryCredential = [PSCredential]::new(
#     "username",
#     ("password" | ConvertTo-SecureString -AsPlainText -Force)
# )
# $RequestArguments.Credential = $NugetRepositoryCredential

### c. Chocolatey nupkg download url ###
#### This url should result in an immediate download when you navigate to it
$ChocolateyDownloadUrl = "$($NugetRepositoryUrl.TrimEnd('/'))/package/chocolatey.2.5.0.nupkg"

### d. Chocolatey Central Management (CCM) ###
#### If using CCM to manage Chocolatey, add the following:
#### i. Endpoint URL for CCM
# $ChocolateyCentralManagementUrl = "https://chocolatey-central-management:24020/ChocolateyManagementService"

#### ii. If using a Client Salt, add it here
# $ChocolateyCentralManagementClientSalt = "clientsalt"

#### iii. If using a Service Salt, add it here
# $ChocolateyCentralManagementServiceSalt = "servicesalt"

## 3. ENSURE CHOCOLATEY IS INSTALLED ##
### Ensure Chocolatey is installed from your internal repository

#### Download the Nupkg, appending .zip to the filename to handle archive cmdlet limitations
if (-not (Get-Command choco.exe -ErrorAction SilentlyContinue)) {
    $TempDirectory = Join-Path $env:Temp "chocolateyInstall"
    if (-not (Test-Path $TempDirectory -PathType Container)) {
        $null = New-Item -Path $TempDirectory -ItemType Directory
    }
    $DownloadedNupkg = Join-Path $TempDirectory "$(Split-Path $ChocolateyDownloadUrl -Leaf).zip"
    Invoke-WebRequest -Uri $ChocolateyDownloadUrl -OutFile $DownloadedNupkg @RequestArguments

    #### Extract the Nupkg, and run the chocolateyInstall script
    if (Get-Command Microsoft.PowerShell.Archive\Expand-Archive -ErrorAction SilentlyContinue) {
        Microsoft.PowerShell.Archive\Expand-Archive -Path $DownloadedNupkg -DestinationPath $TempDirectory -Force
    } else {
        # PowerShell versions <4.0 do not have this function available
        try {
            $shellApplication = New-Object -ComObject Shell.Application
            $zipPackage = $shellApplication.NameSpace($DownloadedNupkg)
            $destinationFolder = $shellApplication.NameSpace($TempDirectory)
            $destinationFolder.CopyHere($zipPackage.Items(), 0x10)
        } catch {
            Write-Warning "Unable to unzip package using built-in compression."
            throw $_
        }
    }

    & $(Join-Path $TempDirectory "tools\chocolateyInstall.ps1")
}

if (-not (Get-Command choco.exe -ErrorAction SilentlyContinue)) {
    refreshenv
}

## 4. CONFIGURE CHOCOLATEY BASELINE ##
### a. FIPS Feature ###
#### If you need FIPS compliance - make this the first thing you configure
#### before you do any additional configuration or package installations
# choco feature enable -n useFipsCompliantChecksums

### b. Apply Recommended Configuration ###
#### Move cache location so Chocolatey is very deterministic about
#### cleaning up temporary data and the location is secured to admins
choco config set --name cacheLocation --value C:\ProgramData\chocolatey\cache

#### Increase timeout to at least 4 hours
choco config set --name commandExecutionTimeoutSeconds --value 14400

#### Turn off download progress when running choco through integrations
choco feature disable --name showDownloadProgress

### c. Sources ###
#### Remove the default community package repository source
choco source list --limitoutput | ConvertFrom-Csv -Header 'Name', 'Location' -Delimiter '|' | ForEach-Object {
    if ($_.Location -eq 'https://community.chocolatey.org/api/v2/') {
        choco source remove -n $_.Name
    }
}

#### Add internal default sources
#### You could have multiple sources here, so we will provide an example
#### of one using the remote repo variable here

#### NOTE: This EXAMPLE may require changes
if ($NugetRepositoryCredential) {
    choco source add --name ChocolateyInternal --source $NugetRepositoryUrl --user $NugetRepositoryCredential.UserName --password $NugetRepositoryCredential.GetNetworkCredential().Password --priority 1
} else {
    choco source add --name ChocolateyInternal --source $NugetRepositoryUrl --priority 1
}

### b. Keep Chocolatey Up To Date ###
#### Keep chocolatey up to date based on your internal source
#### You control the upgrades based on when you push an updated version
####  to your internal repository.
#### Note the source here is to the OData feed, similar to what you see
####  when you browse to https://community.chocolatey.org/api/v2/
choco upgrade chocolatey --confirm

## 5. ENSURE CHOCOLATEY FOR BUSINESS ##
### If you don't have Chocolatey for Business (C4B), you'll want to remove from here down.

### a. Ensure The License File Is Installed ###
#### Create a license package using script from https://docs.chocolatey.org/en-us/how-tos/setup-offline-installation#exercise-4-create-a-package-for-the-license
choco install chocolatey-license --source $NugetRepositoryUrl --confirm

### b. Disable The Licensed Source ###
#### The licensed source cannot be removed, so it must be disabled.
#### This must occur after the license has been set by the license package.
if ("chocolatey-license" -in (choco list --localonly --limitoutput | ConvertFrom-Csv -Header "Name" -Delimiter "|").Name) {
    choco source disable --name chocolatey.licensed
} else {
    Write-Warning "Not disabling 'chocolatey.licensed' feed, as Chocolatey-License has not been installed."
}

### c. Ensure Chocolatey Licensed Extension ###
#### You will have downloaded the licensed extension to your internal repository
#### as you have disabled the licensed repository in step 5b.

#### Ensure the chocolatey.extension package (aka Chocolatey Licensed Extension)
if ("chocolatey-license" -in (choco list --localonly --limitoutput | ConvertFrom-Csv -Header "Name" -Delimiter "|").Name) {
    choco install chocolatey.extension --source $NugetRepositoryUrl --confirm
} else {
    Write-Warning "Not installing 'chocolatey.extension', as Chocolatey-License has not been installed."
}

#### The Chocolatey Licensed Extension unlocks all of the following, which also have configuration/feature items available with them. You may want to visit the feature pages to see what you might want to also enable:
#### - Package Builder - https://docs.chocolatey.org/en-us/features/paid/package-builder
#### - Package Internalizer - https://docs.chocolatey.org/en-us/features/paid/package-internalizer
#### - Package Synchronization (3 components) - https://docs.chocolatey.org/en-us/features/paid/package-synchronization
#### - Package Reducer - https://docs.chocolatey.org/en-us/features/paid/package-reducer
#### - Package Audit - https://docs.chocolatey.org/en-us/features/paid/package-audit
#### - Package Throttle - https://docs.chocolatey.org/en-us/features/paid/package-throttle
#### - CDN Cache Access - https://docs.chocolatey.org/en-us/features/paid/private-cdn
#### - Branding - https://docs.chocolatey.org/en-us/features/paid/branding
#### - Self-Service Anywhere (more components will need to be installed and additional configuration will need to be set) - https://docs.chocolatey.org/en-us/features/paid/self-service-anywhere
#### - Chocolatey Central Management (more components will need to be installed and additional configuration will need to be set) - https://docs.chocolatey.org/en-us/features/paid/chocolatey-central-management
#### - Other - https://docs.chocolatey.org/en-us/features/paid/

### d. Ensure Self-Service Anywhere ###
#### If you have desktop clients where users are not administrators, you may
#### to take advantage of deploying and configuring Self-Service anywhere
choco feature disable --name showNonElevatedWarnings
choco feature enable --name useBackgroundService
choco feature enable --name useBackgroundServiceWithNonAdministratorsOnly
choco feature enable --name allowBackgroundServiceUninstallsFromUserInstallsOnly
choco config set --name allowedBackgroundServiceCommands --value "install,upgrade,uninstall"

### e. Ensure Chocolatey Central Management ###
#### If you want to manage and report on endpoints, you can set up and configure
### Central Management. There are multiple portions to manage, so you'll see
### a section on agents here along with notes on how to configure the server
### side components.
if ($ChocolateyCentralManagementUrl) {
    choco install chocolatey-agent --source $NugetRepositoryUrl --confirm
    choco config set --name CentralManagementServiceUrl --value $ChocolateyCentralManagementUrl
    if ($ChocolateyCentralManagementClientSalt) {
        choco config set --name centralManagementClientCommunicationSaltAdditivePassword --value $ChocolateyCentralManagementClientSalt
    }
    if ($ChocolateyCentralManagementServiceSalt) {
        choco config set --name centralManagementServiceCommunicationSaltAdditivePassword --value $ChocolateyCentralManagementServiceSalt
    }
    choco feature enable --name useChocolateyCentralManagement
    choco feature enable --name useChocolateyCentralManagementDeployments
}

See docs at https://docs.ansible.com/ansible/latest/modules/win_chocolatey_module.html.

If Applicable - Chocolatey Configuration/Installation


## 1. REQUIREMENTS ##
### Here are the requirements necessary to ensure this is successful.

### a. Internal/Private Cloud Repository Set Up ###
#### You'll need an internal/private cloud repository you can use. These are
####  generally really quick to set up and there are quite a few options.
####  Chocolatey Software recommends Nexus, Artifactory Pro, or ProGet as they
####  are repository servers and will give you the ability to manage multiple
####  repositories and types from one server installation.

### b. Download Chocolatey Package and Put on Internal Repository ###
#### You need to have downloaded the Chocolatey package as well.
####  Please see https://chocolatey.org/install#organization

### c. Other Requirements ###
#### i. chocolatey.chocolatey
##### You will require the chocolatey.chocolatey collection to be installed
##### on all machines using this playbook.
##### Please see https://github.com/chocolatey/chocolatey-ansible/#installing-the-collection-from-ansible-galaxy

- name: Install and Configure Chocolatey
  hosts: all

## 2. TOP LEVEL VARIABLES ##
  vars:

### a. Your internal repository url (the main one). ###
####  Should be similar to what you see when you browse
#### to https://community.chocolatey.org/api/v2/
    nuget_repository_url: INTERNAL REPO URL

### b. Internal Repository Credential ###
#### If required, add the repository access credential here and
#### uncomment lines with source_username and source_password below
#    nuget_repository_username: username
#    nuget_repository_password: password

### c. Chocolatey Central Management (CCM) ###
#### If using CCM to manage Chocolatey, add the following:
#### i. Endpoint URL for CCM
#    chocolatey_central_management_url: https://chocolatey-central-management:24020/ChocolateyManagementService

#### ii. If using a Client Salt, add it here
#    chocolatey_central_management_client_salt: clientsalt

#### iii. If using a Service Salt, add it here
#    chocolatey_central_management_service_salt: servicesalt

## 3. ENSURE CHOCOLATEY IS INSTALLED ##
### Ensure Chocolatey is installed from your internal repository

  tasks:
  - name: Install chocolatey
    win_chocolatey:
      name: chocolatey
      source: ""{{ nuget_repository_url }}""
      # source_username: ""{{ nuget_repository_username }}""
      # source_password: ""{{ nuget_repository_password }}""

## 4. CONFIGURE CHOCOLATEY BASELINE ##
### a. FIPS Feature ###
#### If you need FIPS compliance - make this the first thing you configure
#### before you do any additional configuration or package installations
#   - name: Enable FIPS compliance
#     win_chocolatey_feature:
#       name: useFipsCompliantChecksums
#       state: enabled

### b. Apply Recommended Configuration ###

#### Move cache location so Chocolatey is very deterministic about
#### cleaning up temporary data and the location is secured to admins
  - name: Set the cache location
    win_chocolatey_config:
      name: cacheLocation
      state: present
      value: C:\ProgramData\chocolatey\cache

#### Increase timeout to at least 4 hours
  - name: Set the command execution timeout
    win_chocolatey_config:
      name: commandExecutionTimeoutSeconds
      state: present
      value: 14400

#### Turn off download progress when running choco through integrations
  - name: Disable showing download progress
    win_chocolatey_feature:
      name: showDownloadProgress
      state: disabled

### c. Sources ###
#### Remove the default community package repository source
  - name: Remove Chocolatey Community Repository
    win_chocolatey_source:
      name: chocolatey
      state: absent

#### Add internal default sources
#### You could have multiple sources here, so we will provide an example
#### of one using the remote repo variable here
#### NOTE: This EXAMPLE may require changes
  - name: Add Internal Repository
    win_chocolatey_source:
      name: ChocolateyInternal
      state: present
      source: {{ nuget_repository_url }}
      # source_username: {{ nuget_repository_username }}
      # source_password: {{ nuget_repository_password }}
      priority: 1

### b. Keep Chocolatey Up To Date ###
#### Keep chocolatey up to date based on your internal source
#### You control the upgrades based on when you push an updated version
####  to your internal repository.
#### Note the source here is to the OData feed, similar to what you see
####  when you browse to https://community.chocolatey.org/api/v2/
  - name: Upgrade Chocolatey
    win_chocolatey:
      name: chocolatey
      state: latest

## 5. ENSURE CHOCOLATEY FOR BUSINESS ##
### If you don't have Chocolatey for Business (C4B), you'll want to remove from here down.
### a. Ensure The License File Is Installed ###
#### Create a license package using script from https://docs.chocolatey.org/en-us/how-tos/setup-offline-installation#exercise-4-create-a-package-for-the-license
  - name: Install Chocolatey License
    win_chocolatey:
      name: chocolatey-license
      source: ChocolateyInternal
      state: latest

### b. Disable The Licensed Source ###
#### The licensed source cannot be removed, so it must be disabled.
#### This must occur after the license has been set by the license package.
  - name: Disable Chocolatey Community Repository
    win_chocolatey_source:
      name: chocolatey.licensed
      state: disabled

### c. Ensure Chocolatey Licensed Extension ###
#### You will have downloaded the licensed extension to your internal repository
#### as you have disabled the licensed repository in step 5b.

#### Ensure the chocolatey.extension package (aka Chocolatey Licensed Extension)
  - name: Install Chocolatey Extension
    win_chocolatey:
      name: chocolatey.extension
      source: ChocolateyInternal
      state: latest

#### The Chocolatey Licensed Extension unlocks all of the following, which also have configuration/feature items available with them. You may want to visit the feature pages to see what you might want to also enable:
#### - Package Builder - https://docs.chocolatey.org/en-us/features/paid/package-builder
#### - Package Internalizer - https://docs.chocolatey.org/en-us/features/paid/package-internalizer
#### - Package Synchronization (3 components) - https://docs.chocolatey.org/en-us/features/paid/package-synchronization
#### - Package Reducer - https://docs.chocolatey.org/en-us/features/paid/package-reducer
#### - Package Audit - https://docs.chocolatey.org/en-us/features/paid/package-audit
#### - Package Throttle - https://docs.chocolatey.org/en-us/features/paid/package-throttle
#### - CDN Cache Access - https://docs.chocolatey.org/en-us/features/paid/private-cdn
#### - Branding - https://docs.chocolatey.org/en-us/features/paid/branding
#### - Self-Service Anywhere (more components will need to be installed and additional configuration will need to be set) - https://docs.chocolatey.org/en-us/features/paid/self-service-anywhere
#### - Chocolatey Central Management (more components will need to be installed and additional configuration will need to be set) - https://docs.chocolatey.org/en-us/features/paid/chocolatey-central-management
#### - Other - https://docs.chocolatey.org/en-us/features/paid/

### d. Ensure Self-Service Anywhere ###
#### If you have desktop clients where users are not administrators, you may
#### to take advantage of deploying and configuring Self-Service anywhere
  - name: Hide not-elevated warnings
    win_chocolatey_feature:
      name: showNonElevatedWarnings
      state: disabled

  - name: Use background mode for self-service
    win_chocolatey_feature:
      name: useBackgroundService
      state: enabled

  - name: Use background service for non-admins
    win_chocolatey_feature:
      name: useBackgroundServiceWithNonAdministratorsOnly
      state: enabled

  - name: Allow background uninstallation for user installs
    win_chocolatey_feature:
      name: allowBackgroundServiceUninstallsFromUserInstallsOnly
      state: enabled

  - name: Set allowed background service commands
    win_chocolatey_config:
      name: backgroundServiceAllowedCommands
      state: present
      value: install,upgrade,uninstall

### e. Ensure Chocolatey Central Management ###
#### If you want to manage and report on endpoints, you can set up and configure
### Central Management. There are multiple portions to manage, so you'll see
### a section on agents here along with notes on how to configure the server
### side components.
  - name: Install Chocolatey Agent
    when: chocolatey_central_management_url is defined
    win_chocolatey:
      name: chocolatey-agent
      source: ChocolateyInternal
      state: latest

  - name: Set the Central Management Service URL
    when: chocolatey_central_management_url is defined
    win_chocolatey_config:
      name: CentralManagementServiceUrl
      state: present
      value: {{ chocolatey_central_management_url }}

  - name: Set the Central Management Client Salt
    when: chocolatey_central_management_client_salt is defined
    win_chocolatey_config:
      name: centralManagementClientCommunicationSaltAdditivePassword
      state: present
      value: {{ chocolatey_central_management_client_salt }}

  - name: Set the Central Management Service Salt
    when: chocolatey_central_management_service_salt is defined
    win_chocolatey_config:
      name: centralManagementServiceCommunicationSaltAdditivePassword
      state: present
      value: {{ chocolatey_central_management_service_salt }}

  - name: Use Central Management
    when: chocolatey_central_management_url is defined
    win_chocolatey_feature:
      name: useChocolateyCentralManagement
      state: enabled

  - name: Use Central Management Deployments
    when: chocolatey_central_management_url is defined
    win_chocolatey_feature:
      name: useChocolateyCentralManagementDeployments
      state: enabled

See docs at https://docs.chef.io/resource_chocolatey_package.html.

If Applicable - Chocolatey Configuration/Installation


## 1. REQUIREMENTS ##
### Here are the requirements necessary to ensure this is successful.

### a. Internal/Private Cloud Repository Set Up ###
#### You'll need an internal/private cloud repository you can use. These are
####  generally really quick to set up and there are quite a few options.
####  Chocolatey Software recommends Nexus, Artifactory Pro, or ProGet as they
####  are repository servers and will give you the ability to manage multiple
####  repositories and types from one server installation.

### b. Download Chocolatey Package and Put on Internal Repository ###
#### You need to have downloaded the Chocolatey package as well.
####  Please see https://chocolatey.org/install#organization

### c. Other Requirements ###
#### The Chocolatey resources are available with any recent version of Chef.
#### We utilise the Chocolatey recipe to install the Chocolatey binaries.
include_recipe "chocolatey"

## 2. TOP LEVEL VARIABLES ##
### a. Your internal repository url (the main one). ###
####  Should be similar to what you see when you browse
#### to https://community.chocolatey.org/api/v2/
NugetRepositoryUrl = "INTERNAL REPO URL"

### b. Internal Repository Credential ###
#### If required, add the repository access credential here
# NugetRepositoryUsername = "username"
# NugetRepositoryPassword = "password"

### c. Chocolatey nupkg download url ###
#### This url should result in an immediate download when you navigate to it in
#### a web browser
ChocolateyNupkgUrl = "INTERNAL REPO URL/package/chocolatey.2.5.0.nupkg",

### d. Chocolatey Central Management (CCM) ###
#### If using CCM to manage Chocolatey, add the following:
#### i. Endpoint URL for CCM
# ChocolateyCentralManagementUrl = "https://chocolatey-central-management:24020/ChocolateyManagementService"

#### ii. If using a Client Salt, add it here
# ChocolateyCentralManagementClientSalt = "clientsalt"

#### iii. If using a Service Salt, add it here
# ChocolateyCentralManagementServiceSalt = "servicesalt"

## 3. ENSURE CHOCOLATEY IS INSTALLED ##
### Ensure Chocolatey is installed from your internal repository
node['chocolatey']['install vars'] = {
  'chocolateyDownloadUrl' => "#{ChocolateyNupkgUrl}",
}

## 4. CONFIGURE CHOCOLATEY BASELINE ##
### a. FIPS Feature ###
#### If you need FIPS compliance - make this the first thing you configure
#### before you do any additional configuration or package installations
# chocolatey_feature 'useFipsCompliantChecksums' do
#   action :enable
# end

### b. Apply Recommended Configuration ###

#### Move cache location so Chocolatey is very deterministic about
#### cleaning up temporary data and the location is secured to admins
chocolatey_config 'cacheLocation' do
  value 'C:\ProgramData\chocolatey\cache'
end

#### Increase timeout to at least 4 hours
chocolatey_config 'commandExecutionTimeoutSeconds' do
  value '14400'
end

#### Turn off download progress when running choco through integrations
chocolatey_feature 'showDownloadProgress' do
  action :disable
end

### c. Sources ###
#### Remove the default community package repository source
chocolatey_source 'chocolatey' do
  action :remove
end

#### Add internal default sources
#### You could have multiple sources here, so we will provide an example
#### of one using the remote repo variable here

#### NOTE: This EXAMPLE may require changes
chocolatey_source 'ChocolateyInternal' do
  source "#{NugetRepositoryUrl}"
  priority 1
  action   :add
end

execute 'ChocolateyInternal' do
  command "choco source add --name ChocolateyInternal -s #{NugetRepositoryUrl} -u=#{NugetRepositoryUsername} -p=#{NugetRepositoryPassword} --priority=1"
  only_if { NugetRepositoryUsername != nil || NugetRepositoryPassword != nil }
end

### b. Keep Chocolatey Up To Date ###
#### Keep chocolatey up to date based on your internal source
#### You control the upgrades based on when you push an updated version
####  to your internal repository.
#### Note the source here is to the OData feed, similar to what you see
####  when you browse to https://community.chocolatey.org/api/v2/
chocolatey_package 'chocolatey' do
  action :upgrade
  source "#{NugetRepositoryUrl}"
end

## 5. ENSURE CHOCOLATEY FOR BUSINESS ##
### If you don't have Chocolatey for Business (C4B), you'll want to remove from here down.

### a. Ensure The License File Is Installed ###
#### Create a license package using script from https://docs.chocolatey.org/en-us/how-tos/setup-offline-installation#exercise-4-create-a-package-for-the-license
chocolatey_package 'chocolatey-license' do
  action :install
  source "#{NugetRepositoryUrl}"
end

### b. Disable The Licensed Source ###
#### The licensed source cannot be removed, so it must be disabled.
#### This must occur after the license has been set by the license package.
chocolatey_source 'chocolatey.licensed' do
  action            :disable
end

### c. Ensure Chocolatey Licensed Extension ###
#### You will have downloaded the licensed extension to your internal repository
#### as you have disabled the licensed repository in step 5b.

#### Ensure the chocolatey.extension package (aka Chocolatey Licensed Extension)
chocolatey_package 'chocolatey.extention' do
  action     install
  source     "#{NugetRepositoryUrl}"
end

#### The Chocolatey Licensed Extension unlocks all of the following, which also have configuration/feature items available with them. You may want to visit the feature pages to see what you might want to also enable:
#### - Package Builder - https://docs.chocolatey.org/en-us/features/paid/package-builder
#### - Package Internalizer - https://docs.chocolatey.org/en-us/features/paid/package-internalizer
#### - Package Synchronization (3 components) - https://docs.chocolatey.org/en-us/features/paid/package-synchronization
#### - Package Reducer - https://docs.chocolatey.org/en-us/features/paid/package-reducer
#### - Package Audit - https://docs.chocolatey.org/en-us/features/paid/package-audit
#### - Package Throttle - https://docs.chocolatey.org/en-us/features/paid/package-throttle
#### - CDN Cache Access - https://docs.chocolatey.org/en-us/features/paid/private-cdn
#### - Branding - https://docs.chocolatey.org/en-us/features/paid/branding
#### - Self-Service Anywhere (more components will need to be installed and additional configuration will need to be set) - https://docs.chocolatey.org/en-us/features/paid/self-service-anywhere
#### - Chocolatey Central Management (more components will need to be installed and additional configuration will need to be set) - https://docs.chocolatey.org/en-us/features/paid/chocolatey-central-management
#### - Other - https://docs.chocolatey.org/en-us/features/paid/

### d. Ensure Self-Service Anywhere ###
#### If you have desktop clients where users are not administrators, you may
#### to take advantage of deploying and configuring Self-Service anywhere
chocolatey_feature 'showNonElevatedWarnings' do
  action :disable
end

chocolatey_feature 'useBackgroundService' do
  action :enable
end

chocolatey_feature 'useBackgroundServiceWithNonAdministratorsOnly' do
  action :enable
end

chocolatey_feature 'allowBackgroundServiceUninstallsFromUserInstallsOnly' do
  action :enable
end

chocolatey_config 'backgroundServiceAllowedCommands' do
  value 'install,upgrade,uninstall'
end

### e. Ensure Chocolatey Central Management ###
#### If you want to manage and report on endpoints, you can set up and configure
### Central Management. There are multiple portions to manage, so you'll see
### a section on agents here along with notes on how to configure the server
### side components.
chocolatey_package 'chocolatey-agent' do
  action     install
  source     "#{NugetRepositoryUrl}"
  # user       "#{NugetRepositoryUsername}"
  # password   "#{NugetRepositoryPassword}"
  only_if { ChocolateyCentralManagementUrl != nil }
end

chocolatey_config 'CentralManagementServiceUrl' do
  value  "#{ChocolateyCentralManagementUrl}"
  only_if { ChocolateyCentralManagementUrl != nil }
end

chocolatey_config 'centralManagementClientCommunicationSaltAdditivePassword' do
  value   "#{ChocolateyCentralManagementClientSalt}"
  only_if { ChocolateyCentralManagementClientSalt != nil }
end

chocolatey_config 'centralManagementServiceCommunicationSaltAdditivePassword' do
  value   "#{ChocolateyCentralManagementServiceSalt}"
  only_if { ChocolateyCentralManagementServiceSalt != nil }
end

chocolatey_feature 'useChocolateyCentralManagement' do
  action :enable
  only_if { ChocolateyCentralManagementUrl != nil }
end

chocolatey_feature 'useChocolateyCentralManagementDeployments' do
  action :enable
  only_if { ChocolateyCentralManagementUrl != nil }
end

Requires cChoco DSC Resource. See docs at https://github.com/chocolatey/cChoco.

If Applicable - Chocolatey Configuration/Installation


#requires -Modules cChoco
## 1. REQUIREMENTS ##
### Here are the requirements necessary to ensure this is successful.

### a. Internal/Private Cloud Repository Set Up ###
#### You'll need an internal/private cloud repository you can use. These are
####  generally really quick to set up and there are quite a few options.
####  Chocolatey Software recommends Nexus, Artifactory Pro, or ProGet as they
####  are repository servers and will give you the ability to manage multiple
####  repositories and types from one server installation.

### b. Download Chocolatey Package and Put on Internal Repository ###
#### You need to have downloaded the Chocolatey package as well.
####  Please see https://chocolatey.org/install#organization

### c. Other Requirements ###
#### i. Requires chocolatey\cChoco DSC module to be installed on the machine compiling the DSC manifest
#### NOTE: This will need to be installed before running the DSC portion of this script
if (-not (Get-Module cChoco -ListAvailable)) {
    $null = Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5.201 -Force
    if (($PSGallery = Get-PSRepository -Name PSGallery).InstallationPolicy -ne "Trusted") {
        Set-PSRepository -Name PSGallery -InstallationPolicy Trusted
    }
    Install-Module -Name cChoco
    if ($PSGallery.InstallationPolicy -ne "Trusted") {
        Set-PSRepository -Name PSGallery -InstallationPolicy $PSGallery.InstallationPolicy
    }
}

#### ii. Requires a hosted copy of the install.ps1 script
##### This should be available to download without authentication.
##### The original script can be found here: https://community.chocolatey.org/install.ps1

Configuration ChocolateyConfig {
## 2. TOP LEVEL VARIABLES ##
    param(
### a. Your internal repository url (the main one). ###
####  Should be similar to what you see when you browse
#### to https://community.chocolatey.org/api/v2/
        $NugetRepositoryUrl      = "INTERNAL REPO URL",

### b. Chocolatey nupkg download url ###
#### This url should result in an immediate download when you navigate to it in
#### a web browser
        $ChocolateyNupkgUrl      = "INTERNAL REPO URL/package/chocolatey.2.5.0.nupkg",

### c. Internal Repository Credential ###
#### If required, add the repository access credential here
#        $NugetRepositoryCredential = [PSCredential]::new(
#            "username",
#            ("password" | ConvertTo-SecureString -AsPlainText -Force)
#        ),

### d. Install.ps1 URL
#### The path to the hosted install script:
        $ChocolateyInstallPs1Url = "https://community.chocolatey.org/install.ps1"

### e. Chocolatey Central Management (CCM) ###
#### If using CCM to manage Chocolatey, add the following:
#### i. Endpoint URL for CCM
#        $ChocolateyCentralManagementUrl = "https://chocolatey-central-management:24020/ChocolateyManagementService",

#### ii. If using a Client Salt, add it here
#        $ChocolateyCentralManagementClientSalt = "clientsalt",

#### iii. If using a Service Salt, add it here
#        $ChocolateyCentralManagementServiceSalt = "servicesalt"
    )
    Import-DscResource -ModuleName PSDesiredStateConfiguration
    Import-DscResource -ModuleName cChoco

    Node 'localhost' {
## 3. ENSURE CHOCOLATEY IS INSTALLED ##
### Ensure Chocolatey is installed from your internal repository
        Environment chocoDownloadUrl {
            Name  = "chocolateyDownloadUrl"
            Value = $ChocolateyNupkgUrl
        }

        cChocoInstaller installChocolatey {
            DependsOn = "[Environment]chocoDownloadUrl"
            InstallDir = Join-Path $env:ProgramData "chocolatey"
            ChocoInstallScriptUrl = $ChocolateyInstallPs1Url
        }

## 4. CONFIGURE CHOCOLATEY BASELINE ##
### a. FIPS Feature ###
#### If you need FIPS compliance - make this the first thing you configure
#### before you do any additional configuration or package installations
#        cChocoFeature featureFipsCompliance {
#            FeatureName = "useFipsCompliantChecksums"
#        }

### b. Apply Recommended Configuration ###

#### Move cache location so Chocolatey is very deterministic about
#### cleaning up temporary data and the location is secured to admins
        cChocoConfig cacheLocation {
            DependsOn  = "[cChocoInstaller]installChocolatey"
            ConfigName = "cacheLocation"
            Value      = "C:\ProgramData\chocolatey\cache"
        }

#### Increase timeout to at least 4 hours
        cChocoConfig commandExecutionTimeoutSeconds {
            DependsOn  = "[cChocoInstaller]installChocolatey"
            ConfigName = "commandExecutionTimeoutSeconds"
            Value      = 14400
        }

#### Turn off download progress when running choco through integrations
        cChocoFeature showDownloadProgress {
            DependsOn   = "[cChocoInstaller]installChocolatey"
            FeatureName = "showDownloadProgress"
            Ensure      = "Absent"
        }

### c. Sources ###
#### Remove the default community package repository source
        cChocoSource removeCommunityRepository {
            DependsOn  = "[cChocoInstaller]installChocolatey"
            Name       = "chocolatey"
            Ensure     = "Absent"
        }

#### Add internal default sources
#### You could have multiple sources here, so we will provide an example
#### of one using the remote repo variable here.
#### NOTE: This EXAMPLE may require changes
        cChocoSource addInternalSource {
            DependsOn  = "[cChocoInstaller]installChocolatey"
            Name        = "ChocolateyInternal"
            Source      = $NugetRepositoryUrl
            Credentials = $NugetRepositoryCredential
            Priority    = 1
        }

### b. Keep Chocolatey Up To Date ###
#### Keep chocolatey up to date based on your internal source
#### You control the upgrades based on when you push an updated version
####  to your internal repository.
#### Note the source here is to the OData feed, similar to what you see
####  when you browse to https://community.chocolatey.org/api/v2/
        cChocoPackageInstaller updateChocolatey {
            DependsOn   = "[cChocoSource]addInternalSource", "[cChocoSource]removeCommunityRepository"
            Name        = "chocolatey"
            AutoUpgrade = $true
        }

## 5. ENSURE CHOCOLATEY FOR BUSINESS ##
### If you don't have Chocolatey for Business (C4B), you'll want to remove from here down.

### a. Ensure The License File Is Installed ###
#### Create a license package using script from https://docs.chocolatey.org/en-us/how-tos/setup-offline-installation#exercise-4-create-a-package-for-the-license
        cChocoPackageInstaller chocolateyLicense {
            DependsOn = "[cChocoPackageInstaller]updateChocolatey"
            Name      = "chocolatey-license"
        }

### b. Disable The Licensed Source ###
#### The licensed source cannot be removed, so it must be disabled.
#### This must occur after the license has been set by the license package.
        Script disableLicensedSource {
            DependsOn  = "[cChocoPackageInstaller]chocolateyLicense"
            GetScript  = {
                $Source = choco source list --limitoutput | `
                    ConvertFrom-Csv -Delimiter '|' -Header Name, Source, Disabled | `
                    Where-Object Name -eq "chocolatey.licensed"

                return @{
                    Result = if ($Source) {
                        [bool]::Parse($Source.Disabled)
                    } else {
                        Write-Warning "Source 'chocolatey.licensed' was not present."
                        $true  # Source does not need disabling
                    }
                }
            }
            SetScript  = {
                $null = choco source disable --name "chocolatey.licensed"
            }
            TestScript = {
                $State = [ScriptBlock]::Create($GetScript).Invoke()
                return $State.Result
            }
        }

### c. Ensure Chocolatey Licensed Extension ###
#### You will have downloaded the licensed extension to your internal repository
#### as you have disabled the licensed repository in step 5b.

#### Ensure the chocolatey.extension package (aka Chocolatey Licensed Extension)
        cChocoPackageInstaller chocolateyLicensedExtension {
            DependsOn = "[Script]disableLicensedSource"
            Name      = "chocolatey.extension"
        }

#### The Chocolatey Licensed Extension unlocks all of the following, which also have configuration/feature items available with them. You may want to visit the feature pages to see what you might want to also enable:
#### - Package Builder - https://docs.chocolatey.org/en-us/features/paid/package-builder
#### - Package Internalizer - https://docs.chocolatey.org/en-us/features/paid/package-internalizer
#### - Package Synchronization (3 components) - https://docs.chocolatey.org/en-us/features/paid/package-synchronization
#### - Package Reducer - https://docs.chocolatey.org/en-us/features/paid/package-reducer
#### - Package Audit - https://docs.chocolatey.org/en-us/features/paid/package-audit
#### - Package Throttle - https://docs.chocolatey.org/en-us/features/paid/package-throttle
#### - CDN Cache Access - https://docs.chocolatey.org/en-us/features/paid/private-cdn
#### - Branding - https://docs.chocolatey.org/en-us/features/paid/branding
#### - Self-Service Anywhere (more components will need to be installed and additional configuration will need to be set) - https://docs.chocolatey.org/en-us/features/paid/self-service-anywhere
#### - Chocolatey Central Management (more components will need to be installed and additional configuration will need to be set) - https://docs.chocolatey.org/en-us/features/paid/chocolatey-central-management
#### - Other - https://docs.chocolatey.org/en-us/features/paid/

### d. Ensure Self-Service Anywhere ###
#### If you have desktop clients where users are not administrators, you may
#### to take advantage of deploying and configuring Self-Service anywhere
        cChocoFeature hideElevatedWarnings {
            DependsOn   = "[cChocoPackageInstaller]chocolateyLicensedExtension"
            FeatureName = "showNonElevatedWarnings"
            Ensure      = "Absent"
        }

        cChocoFeature useBackgroundService {
            DependsOn   = "[cChocoPackageInstaller]chocolateyLicensedExtension"
            FeatureName = "useBackgroundService"
            Ensure      = "Present"
        }

        cChocoFeature useBackgroundServiceWithNonAdmins {
            DependsOn   = "[cChocoPackageInstaller]chocolateyLicensedExtension"
            FeatureName = "useBackgroundServiceWithNonAdministratorsOnly"
            Ensure      = "Present"
        }

        cChocoFeature useBackgroundServiceUninstallsForUserInstalls {
            DependsOn   = "[cChocoPackageInstaller]chocolateyLicensedExtension"
            FeatureName = "allowBackgroundServiceUninstallsFromUserInstallsOnly"
            Ensure      = "Present"
        }

        cChocoConfig allowedBackgroundServiceCommands {
            DependsOn   = "[cChocoFeature]useBackgroundService"
            ConfigName = "backgroundServiceAllowedCommands"
            Value       = "install,upgrade,uninstall"
        }

### e. Ensure Chocolatey Central Management ###
#### If you want to manage and report on endpoints, you can set up and configure
### Central Management. There are multiple portions to manage, so you'll see
### a section on agents here along with notes on how to configure the server
### side components.
        if ($ChocolateyCentralManagementUrl) {
            cChocoPackageInstaller chocolateyAgent {
                DependsOn = "[cChocoPackageInstaller]chocolateyLicensedExtension"
                Name      = "chocolatey-agent"
            }

            cChocoConfig centralManagementServiceUrl {
                DependsOn   = "[cChocoPackageInstaller]chocolateyAgent"
                ConfigName = "CentralManagementServiceUrl"
                Value       = $ChocolateyCentralManagementUrl
            }

            if ($ChocolateyCentralManagementClientSalt) {
                cChocoConfig centralManagementClientSalt {
                    DependsOn  = "[cChocoPackageInstaller]chocolateyAgent"
                    ConfigName = "centralManagementClientCommunicationSaltAdditivePassword"
                    Value      = $ChocolateyCentralManagementClientSalt
                }
            }

            if ($ChocolateyCentralManagementServiceSalt) {
                cChocoConfig centralManagementServiceSalt {
                    DependsOn  = "[cChocoPackageInstaller]chocolateyAgent"
                    ConfigName = "centralManagementServiceCommunicationSaltAdditivePassword"
                    Value      = $ChocolateyCentralManagementServiceSalt
                }
            }

            cChocoFeature useCentralManagement {
                DependsOn   = "[cChocoPackageInstaller]chocolateyAgent"
                FeatureName = "useChocolateyCentralManagement"
                Ensure      = "Present"
            }

            cChocoFeature useCentralManagementDeployments {
                DependsOn   = "[cChocoPackageInstaller]chocolateyAgent"
                FeatureName = "useChocolateyCentralManagementDeployments"
                Ensure      = "Present"
            }
        }
    }
}

# If working this into an existing configuration with a good method for
$ConfigData = @{
    AllNodes = @(
        @{
            NodeName                    = "localhost"
            PSDscAllowPlainTextPassword = $true
        }
    )
}

try {
    Push-Location $env:Temp
    $Config = ChocolateyConfig -ConfigurationData $ConfigData
    Start-DscConfiguration -Path $Config.PSParentPath -Wait -Verbose -Force
} finally {
    Pop-Location
}

Requires Puppet Chocolatey Provider module. See docs at https://forge.puppet.com/puppetlabs/chocolatey.

If Applicable - Chocolatey Configuration/Installation


## 1. REQUIREMENTS ##
### Here are the requirements necessary to ensure this is successful.

### a. Internal/Private Cloud Repository Set Up ###
#### You'll need an internal/private cloud repository you can use. These are
####  generally really quick to set up and there are quite a few options.
####  Chocolatey Software recommends Nexus, Artifactory Pro, or ProGet as they
####  are repository servers and will give you the ability to manage multiple
####  repositories and types from one server installation.

### b. Download Chocolatey Package and Put on Internal Repository ###
#### You need to have downloaded the Chocolatey package as well.
####  Please see https://chocolatey.org/install#organization

### c. Other Requirements ###
#### i. Requires puppetlabs/chocolatey module
####  See https://forge.puppet.com/puppetlabs/chocolatey


## 2. TOP LEVEL VARIABLES ##
### a. Your internal repository url (the main one). ###
####  Should be similar to what you see when you browse
#### to https://community.chocolatey.org/api/v2/
$_repository_url = 'INTERNAL REPO URL'

### b. Chocolatey nupkg download url ###
#### This url should result in an immediate download when you navigate to it in
#### a web browser
$_choco_download_url = 'INTERNAL REPO URL/package/chocolatey.2.5.0.nupkg'

### c. Chocolatey Central Management (CCM) ###
#### If using CCM to manage Chocolatey, add the following:
#### i. Endpoint URL for CCM
# $_chocolatey_central_management_url = 'https://chocolatey-central-management:24020/ChocolateyManagementService'

#### ii. If using a Client Salt, add it here
# $_chocolatey_central_management_client_salt = "clientsalt"

#### iii. If using a Service Salt, add it here
# $_chocolatey_central_management_service_salt = 'servicesalt'


## 3. ENSURE CHOCOLATEY IS INSTALLED ##
### Ensure Chocolatey is installed from your internal repository
### Note: `chocolatey_download_url is completely different than normal
###  source locations. This is directly to the bare download url for the
###  chocolatey.nupkg, similar to what you see when you browse to
###  https://community.chocolatey.org/api/v2/package/chocolatey
class {'chocolatey':
  chocolatey_download_url => $_choco_download_url,
  use_7zip                => false,
}


## 4. CONFIGURE CHOCOLATEY BASELINE ##
### a. FIPS Feature ###
#### If you need FIPS compliance - make this the first thing you configure
#### before you do any additional configuration or package installations

#chocolateyfeature {'useFipsCompliantChecksums':
#  ensure => enabled,
#}

### b. Apply Recommended Configuration ###

#### Move cache location so Chocolatey is very deterministic about
#### cleaning up temporary data and the location is secured to admins
chocolateyconfig {'cacheLocation':
  value => 'C:\ProgramData\chocolatey\cache',
}

#### Increase timeout to at least 4 hours
chocolateyconfig {'commandExecutionTimeoutSeconds':
  value => '14400',
}

#### Turn off download progress when running choco through integrations
chocolateyfeature {'showDownloadProgress':
  ensure => disabled,
}

### c. Sources ###
#### Remove the default community package repository source
chocolateysource {'chocolatey':
  ensure   => absent,
  location => 'https://community.chocolatey.org/api/v2/',
}

#### Add internal default sources
#### You could have multiple sources here, so we will provide an example
#### of one using the remote repo variable here

#### NOTE: This EXAMPLE requires changes
chocolateysource {'internal_chocolatey':
  ensure             => present,
  location           => $_repository_url,
  priority           => 1,
  username           => 'optional',
  password           => 'optional,not ensured',
  bypass_proxy       => true,
  admin_only         => false,
  allow_self_service => false,
}

### b. Keep Chocolatey Up To Date ###
#### Keep chocolatey up to date based on your internal source
#### You control the upgrades based on when you push an updated version
####  to your internal repository.
#### Note the source here is to the OData feed, similar to what you see
####  when you browse to https://community.chocolatey.org/api/v2/

package {'chocolatey':
  ensure   => latest,
  provider => chocolatey,
  source   => $_repository_url,
}


## 5. ENSURE CHOCOLATEY FOR BUSINESS ##
### If you don't have Chocolatey for Business (C4B), you'll want to remove from here down.

### a. Ensure The License File Is Installed ###
#### Create a license package using script from https://docs.chocolatey.org/en-us/guides/organizations/organizational-deployment-guide#exercise-4-create-a-package-for-the-license

# TODO: Add resource for installing/ensuring the chocolatey-license package
package {'chocolatey-license':
  ensure   => latest,
  provider => chocolatey,
  source   => $_repository_url,
}

### b. Disable The Licensed Source ###
#### The licensed source cannot be removed, so it must be disabled.
#### This must occur after the license has been set by the license package.
## Disabled sources still need all other attributes until
## https://tickets.puppetlabs.com/browse/MODULES-4449 is resolved.
## Password is necessary with user, but not ensurable, so it should not
## matter what it is set to here. If you ever do get into trouble here,
## the password is your license GUID.
chocolateysource {'chocolatey.licensed':
  ensure   => disabled,
  priority => '10',
  user     => 'customer',
  password => '1234',
  require  => Package['chocolatey-license'],
}

### c. Ensure Chocolatey Licensed Extension ###
#### You will have downloaded the licensed extension to your internal repository
#### as you have disabled the licensed repository in step 5b.

#### Ensure the chocolatey.extension package (aka Chocolatey Licensed Extension)
package {'chocolatey.extension':
  ensure   => latest,
  provider => chocolatey,
  source   => $_repository_url,
  require  => Package['chocolatey-license'],
}

#### The Chocolatey Licensed Extension unlocks all of the following, which also have configuration/feature items available with them. You may want to visit the feature pages to see what you might want to also enable:
#### - Package Builder - https://docs.chocolatey.org/en-us/features/paid/package-builder
#### - Package Internalizer - https://docs.chocolatey.org/en-us/features/paid/package-internalizer
#### - Package Synchronization (3 components) - https://docs.chocolatey.org/en-us/features/paid/package-synchronization
#### - Package Reducer - https://docs.chocolatey.org/en-us/features/paid/package-reducer
#### - Package Audit - https://docs.chocolatey.org/en-us/features/paid/package-audit
#### - Package Throttle - https://docs.chocolatey.org/en-us/features/paid/package-throttle
#### - CDN Cache Access - https://docs.chocolatey.org/en-us/features/paid/private-cdn
#### - Branding - https://docs.chocolatey.org/en-us/features/paid/branding
#### - Self-Service Anywhere (more components will need to be installed and additional configuration will need to be set) - https://docs.chocolatey.org/en-us/features/paid/self-service-anywhere
#### - Chocolatey Central Management (more components will need to be installed and additional configuration will need to be set) - https://docs.chocolatey.org/en-us/features/paid/chocolatey-central-management
#### - Other - https://docs.chocolatey.org/en-us/features/paid/

### d. Ensure Self-Service Anywhere ###
#### If you have desktop clients where users are not administrators, you may
#### to take advantage of deploying and configuring Self-Service anywhere
chocolateyfeature {'showNonElevatedWarnings':
  ensure => disabled,
}

chocolateyfeature {'useBackgroundService':
  ensure => enabled,
}

chocolateyfeature {'useBackgroundServiceWithNonAdministratorsOnly':
  ensure => enabled,
}

chocolateyfeature {'allowBackgroundServiceUninstallsFromUserInstallsOnly':
  ensure => enabled,
}

chocolateyconfig {'backgroundServiceAllowedCommands':
  value => 'install,upgrade,uninstall',
}

### e. Ensure Chocolatey Central Management ###
#### If you want to manage and report on endpoints, you can set up and configure
### Central Management. There are multiple portions to manage, so you'll see
### a section on agents here along with notes on how to configure the server
### side components.
if $_chocolatey_central_management_url {
  package {'chocolatey-agent':
    ensure   => latest,
    provider => chocolatey,
    source   => $_repository_url,
    require  => Package['chocolatey-license'],
  }

  chocolateyconfig {'CentralManagementServiceUrl':
    value   => $_chocolatey_central_management_url,
  }

  if $_chocolatey_central_management_client_salt {
    chocolateyconfig {'centralManagementClientCommunicationSaltAdditivePassword':
      value => $_chocolatey_central_management_client_salt,
    }
  }

  if $_chocolatey_central_management_service_salt {
    chocolateyconfig {'centralManagementClientCommunicationSaltAdditivePassword':
      value => $_chocolatey_central_management_client_salt,
    }
  }

  chocolateyfeature {'useChocolateyCentralManagement':
    ensure  => enabled,
    require => Package['chocolatey-agent'],
  }

  chocolateyfeature {'useChocolateyCentralManagementDeployments':
    ensure  => enabled,
    require => Package['chocolatey-agent'],
  }
}

Need Help? View our docs or file an issue.

There is already a version of this package in your Script Builder

Current Version	New Version

Downloads:

86

Downloads of v 128.12.0:

56

Last Update:

06 Jul 2025

Package Maintainer(s):

chocolatey-community

Software Author(s):

Mozilla

Tags:

Thunderbird (ESR)

128.12.0 | Updated: 06 Jul 2025

Downloads:

Downloads of v 128.12.0:

Maintainer(s):

chocolatey-community

Software Author(s):

Mozilla

Tags:

mozilla thunderbird email admin foss cross-platform

Thunderbird (ESR) 128.12.0

Legal Disclaimer: Neither this package nor Chocolatey Software, Inc. are affiliated with or endorsed by Mozilla. The inclusion of Mozilla trademark(s), if any, upon this webpage is solely to identify Mozilla goods or services and not for commercial purposes.

All Checks are Passing

3 Passing Tests

Show Checks

Validation Testing Passed

Verification Testing Passed

Details

Scan Testing Successful:

No detections found in any package files

Details

Learn More

Deployment Method: Individual Install, Upgrade, & Uninstall

To install Thunderbird (ESR), run the following command from the command line or from PowerShell:

To upgrade Thunderbird (ESR), run the following command from the command line or from PowerShell:

To uninstall Thunderbird (ESR), run the following command from the command line or from PowerShell:

NOTE

This applies to both open source and commercial editions of Chocolatey.

1. Enter Your Internal Repository Url

(this should look similar to https://community.chocolatey.org/api/v2/)

2. Setup Your Environment

1. Ensure you are set for organizational deployment

Please see the organizational deployment guide

2. Get the package into your environment

Option 1: Cached Package (Unreliable, Requires Internet - Same As Community)

Open Source or Commercial:
- Proxy Repository - Create a proxy nuget repository on Nexus, Artifactory Pro, or a proxy Chocolatey repository on ProGet. Point your upstream to https://community.chocolatey.org/api/v2/. Packages cache on first access automatically. Make sure your choco clients are using your proxy repository as a source and NOT the default community repository. See source command for more information.
- You can also just download the package and push it to a repository Download

Option 2: Internalized Package (Reliable, Scalable)

Open Source
- Download the package:
  Download
- Follow manual internalization instructions

Package Internalizer (C4B)

Run: (additional options)

choco download thunderbirdesr --internalize --source=https://community.chocolatey.org/api/v2/

For package and dependencies run:

choco push --source="'INTERNAL REPO URL'"

Automate package internalization

3. Copy Your Script

choco upgrade thunderbirdesr -y --source="'INTERNAL REPO URL'" [other options]

See options you can pass to upgrade.

See best practices for scripting.

Add this to a PowerShell script or use a Batch script with tools and in places where you are calling directly to Chocolatey. If you are integrating, keep in mind enhanced exit codes.

If you do use a PowerShell script, use the following to ensure bad exit codes are shown as failures:


choco upgrade thunderbirdesr -y --source="'INTERNAL REPO URL'" 
$exitCode = $LASTEXITCODE

Write-Verbose "Exit code was $exitCode"
$validExitCodes = @(0, 1605, 1614, 1641, 3010)
if ($validExitCodes -contains $exitCode) {
  Exit 0
}

Exit $exitCode


- name: Install thunderbirdesr
  win_chocolatey:
    name: thunderbirdesr
    version: '128.12.0'
    source: INTERNAL REPO URL
    state: present

See docs at https://docs.ansible.com/ansible/latest/modules/win_chocolatey_module.html.


chocolatey_package 'thunderbirdesr' do
  action    :install
  source   'INTERNAL REPO URL'
  version  '128.12.0'
end

See docs at https://docs.chef.io/resource_chocolatey_package.html.


cChocoPackageInstaller thunderbirdesr
{
    Name     = "thunderbirdesr"
    Version  = "128.12.0"
    Source   = "INTERNAL REPO URL"
}

Requires cChoco DSC Resource. See docs at https://github.com/chocolatey/cChoco.


package { 'thunderbirdesr':
  ensure   => '128.12.0',
  provider => 'chocolatey',
  source   => 'INTERNAL REPO URL',
}

Requires Puppet Chocolatey Provider module. See docs at https://forge.puppet.com/puppetlabs/chocolatey.

4. If applicable - Chocolatey configuration/installation

See infrastructure management matrix for Chocolatey configuration elements and examples.

Package Approved

This package was approved as a trusted package on 06 Jul 2025.

Description

Thunderbird is a free email application that's easy to set up and customize and it's loaded with great features!

Package Parameters

/l:LOCALE - Install given Firefox locale. See the official page for a complete list of available locales.
/UseMozillaFallback Makes a request to mozilla.org and reads the supported Language Culture code from the website.
/NoStop - Do not stop Thunderbird before running the install if it is running or attempt to restart it after install.

Command-line options for installer configuration. See the official page for details and defaults.

/InstallDir:PATH
/NoTaskbarShortcut Do not create Taskbar Shortcut
/NoDesktopShortcut Do not create Desktop Shortcut
/NoStartMenuShortcut Do not create Start Menu Shortcut
/NoMaintenanceService Do not install Maintenance Service
/RemoveDistributionDir Remove Distribution directory on installation/update. (This is the default behavior of the Thunderbird Installer, but not for this Chocolatey Package)
/NoAutoUpdate Sets a policies.json file to not update Thunderbird and does not install the Maintenance Service

Examples

choco install thunderbirdesr --params "/l=en-GB"
choco install thunderbirdesr --params "/NoTaskbarShortcut /NoDesktopShortcut /NoAutoUpdate"
choco install thunderbirdesr --params "/UseMozillaFallback"
choco install thunderbirdesr --params "/NoStop"

Notes

Looking for Thunderbird monthly release? Install the thunderbird package.
If locale package parameter is not present, this package installs Thunderbird in the first language which matches this list:
1. If Thunderbird is already installed: the same language as the already installed Thunderbird.
2. The Windows system language where the Thunderbird package gets installed.
3. Language Culture code specified on Mozilla website (only when /UseMozillaFallback is specified).
4. If Thunderbird does not support the system language, it will fallback to en-US.
If the package is out of date please check Version History for the latest submitted version. If you have a question, please ask it in Chocolatey Community Package Discussions or raise an issue on the Chocolatey Community Packages Repository if you have problems with the package. Disqus comments will generally not be responded to.

Files

tools\chocolateyInstall.ps1

# This is the general install script for Mozilla products (Firefox and Thunderbird).
# This file must be identical for all Choco packages for Mozilla products in this repository.

$ErrorActionPreference = 'Stop'

$toolsPath = Split-Path $MyInvocation.MyCommand.Definition
. $toolsPath\helpers.ps1

$packageName  = 'thunderbirdesr'
$softwareName = 'Mozilla Thunderbird'

$pp = Get-PackageParameters

if (Get-32bitOnlyInstalled -product $softwareName) { Write-Host 'Detected the 32-bit version of Thunderbird on a 64-bit system. This package will continue to install the 32-bit version of Thunderbird unless the 32-bit version is uninstalled.' }

$sa = ""

# Command Line Options from the Thunderbird (and Firefox) installer
# https://firefox-source-docs.mozilla.org/browser/installer/windows/installer/FullConfig.html

# Always prevent Thunderbird installer to require a reboot
$sa += " /PreventRebootRequired=true"

# Prevent RemoveDistributionDir by default
$sa += " /RemoveDistributionDir=false"


$sa += if ($pp.InstallDir) { " /InstallDirectoryPath=" + $pp.InstallDir }

$sa += if ($pp.NoTaskbarShortcut) { " /TaskbarShortcut=false" }

$sa += if ($pp.NoDesktopShortcut) { " /DesktopShortcut=false" }

$sa += if ($pp.NoStartMenuShortcut) { " /StartMenuShortcut=false" }

$sa += if ($pp.NoMaintenanceService) { " /MaintenanceService=false" }

$sa += if ($pp.RemoveDistributionDir) { " /RemoveDistributionDir=true" }

$sa += if ($pp.NoAutoUpdate) { " /MaintenanceService=false" }

$alreadyInstalled = (AlreadyInstalled -product $softwareName -version '128.12.0')
if ($alreadyInstalled -and ($env:ChocolateyForce -ne $true)) {
  Write-Host "Thunderbird is already installed. No need to download and re-install."
  return
}

$tbProcess = Get-Process thunderbird -ea 0
if ($tbProcess) {
  if ($pp.NoStop) {
    Write-Warning "Not stopping running thunderbird process"  
  } else {
    Write-Host 'Stopping running thunderbird process'
    Stop-Process $tbProcess
    # We make an assumption that the first unique item found
    # will be have the path to the process we want to restart.
    $tbProcess = $tbProcess.Path | Select-Object -Unique -First 1
  }
}

$locale = 'en-US' #https://github.com/chocolatey/chocolatey-coreteampackages/issues/933
$locale = GetLocale -localeFile "$toolsPath\LanguageChecksums.csv" -product $softwareName
$checksums = GetChecksums -language $locale -checksumFile "$toolsPath\LanguageChecksums.csv"

$packageArgs = @{
  packageName = $packageName
  fileType = 'exe'
  softwareName = "$softwareName*"

  Checksum = $checksums.Win32
  ChecksumType = 'sha512'
  Url = "https://download.mozilla.org/?product=thunderbird-128.12.0esr&os=win&lang=${locale}"

  silentArgs     = "$sa /S"
  validExitCodes = @(0)
}

if (!(Get-32bitOnlyInstalled($softwareName)) -and (Get-OSArchitectureWidth 64)) {
  $packageArgs.Checksum64 = $checksums.Win64
  $packageArgs.ChecksumType64 = 'sha512'
  $packageArgs.Url64 = "https://download.mozilla.org/?product=thunderbird-128.12.0esr&os=win64&lang=${locale}"
}

Install-ChocolateyPackage @packageArgs

if ($pp.InstallDir) {
  $installPath = $pp.InstallDir
}
else {
  $installPath = Get-AppInstallLocation $softwareName
}

if (-Not(Test-Path ($installPath + "\distribution\policies.json") -ErrorAction SilentlyContinue) -and ($pp.NoAutoUpdate) ) {
  if (-Not(Test-Path ($installPath + "\distribution") -ErrorAction SilentlyContinue)) {
    New-Item ($installPath + "\distribution") -ItemType directory
  }

  $policies = @"
{
    "policies":  {
                     "DisableAppUpdate":  true
                 }
}
"@

  $policies | Out-File -FilePath ($installPath + "\distribution\policies.json") -Encoding ascii
}

if ($tbProcess -and !$pp.NoStop) {
  Write-Host "Restarting thunderbird process"
  Start-Process $tbProcess
}

tools\chocolateyUninstall.ps1

$ErrorActionPreference = 'Stop';

$packageName = 'thunderbirdesr'

$uninstalled = $false
[array]$key = Get-UninstallRegistryKey -SoftwareName 'Mozilla Thunderbird*'

if ($key.Count -eq 1) {
  $key | ForEach-Object {
    $packageArgs = @{
      packageName = $packageName
      fileType    = 'exe'
      silentArgs  = '-ms'
      validExitCodes= @(0)
      file          = "$($_.UninstallString.Trim('"'))"
    }

    Uninstall-ChocolateyPackage @packageArgs

    Write-Warning "Auto Uninstaller may detect Mozilla Maintenance Service."
    Write-Warning "This should not be uninstalled if any other Mozilla product is installed."
  }
} elseif ($key.Count -eq 0) {
  Write-Warning "$packageName has already been uninstalled by other means."
} elseif ($key.Count -gt 1) {
  Write-Warning "$($key.Count) matches found!"
  Write-Warning "To prevent accidental data loss, no programs will be uninstalled."
  Write-Warning "Please alert package maintainer the following keys were matched:"
  $key | ForEach-Object {Write-Warning "- $($_.DisplayName)"}
}

tools\helpers.ps1

function GetUninstallPath() {
  param(
    [Parameter(Mandatory = $true)]
    [string]$product
  )
  $regUninstallDir = 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\'
  $regUninstallDirWow64 = 'HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\'

  $uninstallPaths = $(Get-ChildItem $regUninstallDir).Name

  if (Test-Path $regUninstallDirWow64) {
    $uninstallPaths += $(Get-ChildItem $regUninstallDirWow64).Name
  }

  $uninstallPath = $uninstallPaths -match "$product [\d\.]+ \([^\s]+ [a-zA-Z\-]+\)" | Select-Object -First 1
  return $uninstallPath
}

function GetLocale {
  param(
    [Parameter(Mandatory = $true)]
    [string]$localeFile,
    [Parameter(Mandatory = $true)]
    [string]$product
  )
  #$availableLocales = Get-WebContent $localeUrl 2>$null
  $availableLocales = Get-Content $localeFile | ForEach-Object { $_ -split '\|' | Select-Object -First 1 } | Select-Object -Unique
  Write-Debug "$($availableLocales.Count) locales are stored.`n$availableLocales"

  $PackageParameters = Get-PackageParameters

  if ($PackageParameters['l']) {
    $localeFromPackageParameters = $PackageParameters['l']
    Write-Verbose "User chooses '$localeFromPackageParameters' as a locale..."
    $localeFromPackageParametersTwoLetter = $localeFromPackageParameters -split '\-' | Select-Object -First 1
    Write-Verbose "With fallback to '$localeFromPackageParametersTwoLetter' as locale..."
  }

  $uninstallPath = GetUninstallPath -product $product

  $alreadyInstalledLocale = $uninstallPath -replace '.+\s([a-zA-Z\-]+)\)', '$1'
  Write-Verbose "Installed locale is: '$alreadyInstalledLocale'..."

  $systemLocalizeAndCountry = (Get-UICulture).Name
  $systemLocaleThreeLetter = (Get-UICulture).ThreeLetterWindowsLanguageName
  $systemLocaleTwoLetter = (Get-UICulture).TwoLetterISOLanguageName

  # Never change the fallback locale here, this is the absolute
  # value we always expect to fall back to when nothing else is
  # found.
  $fallbackLocale = $mozillaFallback = 'en-US'
  if ($PackageParameters['UseMozillaFallback']) {
    Write-Verbose "System locale is: '$systemLocalizeAndCountry'..."
    # We need to use web content instead of web headers here, due to
    # web header helper does not allow custom headers.
    $urlParts = @( 'htt', 'mozilla' )
    $Response = Get-WebContent -url "$($urlParts[0])ps://www.$($urlParts[1]).org/" -Options @{ Headers = @{ 'Accept-Language' = $systemLocalizeAndCountry } } -ErrorAction Ignore 2>$null
    # The lang attribute on the html element will be the closest
    # supported language when comparing to the system locale.
    # As such we use that as an additional fallback when possible.
    if ($Response -match 'lang="(?<locale>[^"]+)"') {
      $mozillaFallback = $Matches['locale']
      Write-Verbose "Mozilla fallback locale is: '$mozillaFallback'..."
    }
    else {
      Write-Warning 'No fallback found using the Mozilla website.'
    }
  }

  Write-Verbose "Absolute Fallback locale is: '$fallbackLocale'..."

  $locales = $localeFromPackageParameters, $localeFromPackageParametersTwoLetter, `
    $alreadyInstalledLocale, $systemLocalizeAndCountry, $systemLocaleThreeLetter, `
    $systemLocaleTwoLetter, $mozillaFallback, $fallbackLocale

  foreach ($locale in $locales) {
    Write-Debug "Testing locale $locale of whether we have the information or not"
    $localeMatch = $availableLocales | Where-Object { $_ -eq $locale } | Select-Object -First 1
    if ($localeMatch -and $locale -ne $null) {
      Write-Host "Using locale '$locale'..."
      break
    }
  }

  return $locale
}

function AlreadyInstalled() {
  param(
    [Parameter(Mandatory = $true)]
    [string]$product,
    [Parameter(Mandatory = $true)]
    [string]$version
  )
  $uninstallEntry = $(
    "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\$product $version*"
  )
  $uninstallEntryWow64 = $(
    "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\$product $version*"
  )

  if ((Test-Path $uninstallEntry) -or (Test-Path $uninstallEntryWow64)) {
    return $true
  }

  return $false
}

function Get-32bitOnlyInstalled() {
  param(
    [Parameter(Mandatory = $true)]
    [string]$product
  )
  $systemIs64bit = Get-OSArchitectureWidth 64

  if (-Not $systemIs64bit) {
    return $false
  }

  $registryPaths = @(
    'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall'
    'HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall'
  )

  $installedVersions = Get-ChildItem $registryPaths | Where-Object { $_.Name -match "$product [\d\.]+ \(x(64|86)" }

  if (
    $installedVersions -match 'x86' `
      -and $installedVersions -notmatch 'x64' `
      -and $systemIs64bit
  ) {
    return $true
  }
}

function GetChecksums() {
  param(
    [Parameter(Mandatory = $true)]
    [string]$language,
    [Parameter(Mandatory = $true)]
    $checksumFile
  )
  Write-Debug "Loading checksums from: $checksumFile"
  $checksumContent = Get-Content $checksumFile
  $checksum32 = ($checksumContent -match "$language\|32") -split '\|' | Select-Object -Last 1
  $checksum64 = ($checksumContent -match "$language\|64") -split '\|' | Select-Object -Last 1

  return @{
    'Win32' = $checksum32
    'Win64' = $checksum64
  }
}

tools\LanguageChecksums.csv

af|32|19cc4f534b86397b5610e2b631872565ca1b0c443729f13fcfde61a4a89e830a48bff20ee099304e48d730ef7131f9e67d427d6519604389ff6438e0189115fa
ar|32|8ff730f983a664e0816a4e399d89655272fe93750612eae28568b0ed0419cc9e8834f1a32b0505e0f40f6ae4f56c3fe91079e4733a993aa39281396b232ac86e
ast|32|8364e35ab809515719b47ddd98a2d0beec891ba10016ccb699be843517d813062037bb89cf1cd2b8dc782601ee556f562dd0f3a9eeb604fad7a1cdeb09127c86
be|32|cc79307ac7deeb0e4d013365e17f638ccf4d9a0ee016ff55a409de9b97f40eb5dcfb8ca88b8c3a29d62ad63793da54cfe7bbca55a3c7c7919fa9232b77c0a4be
bg|32|9548dde6b4b27e53c5f364c3a6b86a5bda608e35f1fda578729207f08f941b5c229b6f82cc168cdbb0f56b2bf13ff4a16c8c3b1d347602bf8fe83db75efac187
br|32|f0d772d45c800d1c3d786315996f0bb935113812ccc265eb0f4e54a19646806dd2e3fcc8b6bb69c9a6bbe91c5b408e849422899532af10371a800f38b4ff48f2
ca|32|8ce64b1d3be011e0139c666df80a5c3803178dfbbd43d512e968c2a7c8744dbf5f788849972954ce4624cd48e6f636527690ba4ed3d84e46715e5b594f97184b
cak|32|27f4e67a6822c3d783244488aaa6404e124d3d10d20bb563cfae74e76bd7a1c9afc505847e98a1744a40bb4e263c32d64b3412c18d00545482545e733a6fdb88
cs|32|1955d377c6f85a80c86f609dbdec57e210e5c89cec0cff55e0f13afb760cb03493e9220334ffe6222b2109381546986d07d1774a249381c7b2e3353a7f7f6b33
cy|32|2894ce79681d8cb6f2a9d864aeeede5a30cbfae0e73a1509197ff1a6fa73852ce36f6859ce1da10432f2fc53d140015809eafc56e61871f6d2e57316d94c2c66
da|32|f9738316326f85a435fd76d0e94ed11c4fe105225224808507eea53f84ba1005287e0a1b19a5d9a46570610426a2005abc20d9e0669dd6161c6d54966c283278
de|32|f518cbc13d8f28ce32cb2535948dd304c87e5f245717477656eafde4ff47681f5a941612a6a99e8ae5bcb521ea9758bd4b6b039c01b656afc567d5799e147cfa
dsb|32|ce1a70bc506efd58c212b88efda4b81beb3adcb1c3bed10d3b9750df2218b475f0e6a53d1bb009f2d2a666af2f17cf7d2532ae426ba6a4dd9d26c8858be8757b
el|32|3903dd33864bd014e432207c6e8feea6e55d3aadcd263c2f4f5f70fd80d510a84ed72ce37de9b3081a7457c097a96fcf70076072f64c908f5e11a4fabebb0af1
en-CA|32|31b883d637c749c83860c610faa70ca91f4a4090229cf5d51bd343a2164fd79aca5d52707ef3381a6863bde37a2b109d01831951110ba1ed33196ef042ca31ff
en-GB|32|b7b280263c23eb66b46f0f8f54751771c4e874e7c30c7041c51de5f950ca183e8b8275b23fd7087e42037814ffecc2073bdcbb6d730664330dababc886bc3526
en-US|32|e85a462622c5b98b5ecc3608c780f53fb53e34aaa773cd002b353d8ecfa79ce921de976cf4f04759be7a63c815fd7216707a3b37caa5e193ed3bde09ebeed064
es-AR|32|eb326df1d6a9a9f6a5d0dd224270a9905626a5f575579780bccdca92ba3f19b9a9d1d1664e6809f089b45f5777d634bed4742d5fc59278fd4a0f31b5df447139
es-ES|32|6581a32ee0df02935a4dcfdb2bfdcd48c59ade39f21cc9447cca7d84f937a24bf46f18f34a09450fc408aae11047e98043012d6bcf626675f3248f07f86493ae
es-MX|32|9e64b868197d1d9b0092a746d983bb8751af5f8ca528510874439454839aca0ed1243277cf2d2b9b23b3949778c5168da6d6fa03ca497051a0dd7bcf70f5a71e
et|32|478d3e03a7ec71ba2ba5ce97740af6f41005cecb959b9fb056e49b77688b673111a9d87340d31e94840177d76a1798fd02fb5466d9d7338cef958e356dc451d9
eu|32|4dacd020b04b3e1c5cf4a554be7999c822a461c0025c5af4f8161bfd6df3df2b0b83c7a5fcb8f9db0033c7e8d2efdf2f01777099f81bfcc536ec53e2db790d99
fi|32|e18f4cc6c71f153ad281974178b6dfab8cc9ebafe37407c8d1115c3bea004ec2b3ca947b5c0f7a1a5d3298c6a34b3ccc408fd67c3e92ccf8dce9d6da8c853869
fr|32|289150a254b431f606268042faad2441ea7ad349b37183d4c76da863ff57ec5cd0c8fbb0f759085f7e748e61ee06007dfe06d69493883c506b98e1325d4c991c
fy-NL|32|a422c3819cdeb6435a3de1a0d848b879282c0af578d423abd574d0187a1bde94ff2a946439367ec91a6bb94ba1c3055ab4d901bb2e55dc1afd9489eb1528e8c2
ga-IE|32|60ea9d03ca0778c5be9279dab156e063eb18b82c51e9045e76545788f2b58cde3675da998818ec2284fbe2ddb91602e0538728417a1af9d146cfab2f1fdd10fe
gd|32|69b7c66ce0b98dda09543eca273c543e8906df1c4057acfd45623dff80b85e92fb3f071559f06cc0ef7d9bcab7ec40c4868df3c5fcc8f38f4857c015886f7f9b
gl|32|1b5d287f0b9d0396e073a583651aead06da400dea761a2bec22cb325af4dd681819534b9a2652ec378357554ac8096e442e4b41aa3ba27041ac80f6797f4fc1b
he|32|b0022fcb8d98fa124c461df04fdeb632522f61141cdde3f679f515ad0a3f69699612b8d2ac6ce245d2f190f2d9a21411986b95a49cf8fa0be7ac44e2d414293f
hr|32|9dd54269ff07249089162bc0bc0c809fd24092b4d38ace43359fc7f0267e3bce3d33b216df90cd08c842628c814a97e37ff5492613fec9a848f17106d1179e69
hsb|32|c9515c63cc1512aff6dc70ba0859fe47ba9101054af0850a03a49c472b153fb9cdaac3bae946eb663e273a5689a189ac3cd4123472b7e2c28ac41db24bac47d5
hu|32|73a5dfb0b244b95dc42899da364d8a9775401a3bcd8af355c6fa7c084d0ab23981580357d25743e7e85c6ee930398f18e10c7411b47cfbe68d630bf60fcf966c
hy-AM|32|6ae8bcd1826716dcd8c289a3cafe23d774393bcb79d0a1ed2f3ef3a71fc24586a797a55d0f5176ca3a8befea20ceb10bfbf31d385a70bd8183eaa9f6434c8f0c
id|32|dbfd6bfc27e4992f20113d4d0d854c719e06de36dea660935d49f183cc32891ff89808529c1b20da00a464c9374d93c5b883c98bc0272476df6d2d8a5eea0006
is|32|ab27199adba7d8d0e04a4bd6494725606a1a2fa787c66ed6c700d54dcca815f338161d683566fa4aae77b2d125150d309b9d0fc03235e913ccf452adc2de8156
it|32|f57f27361633ad2775692ba000d0d93deacacba359747c4ca0b364111ae3fbc9891105739324fd28d4b0ed0ee1aa561493d6eee74fe22c8e12b0bbd7293c34b8
ja|32|ca4a6d9da71ce46d422cfba87186576de907114cd7b50c410148e40f5e3074195d27c37356dff5230abf1bf121a5c942c2c848bbb48996c3052f6560bd9323e2
ka|32|bc0bef7aad0ff5f310fc0dd84cfddc890eaff2827f6e4ea0dfac9a4c832db9df5bd672de92c41b520ccbd22ef3caeba5281ae7877928992e85cdae2959620f85
kab|32|31c129d1d3323dbcc1c04e8b31041d7165518d1c777da430d46a64871beba903ff2994721b5ec689e17aee9dc2f4b27a6c99ebc19a6f3ed731f506a4ee6647a0
kk|32|225601fc2fc5d9a1a26f277ab7d235fec59637d3a38bb239bca4c59b3dba3e188ed0e43c1afa150453f9f995e22accb3959033464e70d6f3261f5e624d9c36c8
ko|32|050ed1ea706114242cee0e320b28a460b7f7db2e01af89159d2fca40a7a446c1849f2a923365660838cb1ac1fc6e80e158b51e7df5b42151b24653af29e906b0
lt|32|93a96ff0cbe0bc819cf230bbff54e1b8785d46d0f2a22c2a1d020f853a07d63ddca1e8cc42e526b3cbfddb508d910003f3d151bf1bd7db0fea514598036686b0
lv|32|5abdb7d65a5b28380a6792039fcd957638cb847c8e9c3cb8211f341a7431ac3fb1730ffab6482155cb15e447fcb19a941c0c5669148d3149d1e1ce0000f2ef7c
ms|32|aa3989fb29bd1faf4dc68af082c14b37d58a45854e316653307bb02700c07d85a78cb74926b70e088657da835ecdf5e1e0af7ee066c8a6e90f1969ce1d80c631
nb-NO|32|d970981dc0cdf43101ffa16b4baa628f6461d6473bf35d8aad5eab212f5a0d2445fd323e100c961b3ade335c536c22d5a04bb02d7681cab22c29ecab0b5ad6ef
nl|32|ed7594cf97a9f296515ae08cd3efb92169418c0ecfa35c630fa6559bfc99fc81f5bd540d3965b79f329e5a2eb8ad65c909ef73bdf48fb2d181a194fd9bb0eddd
nn-NO|32|5a72ad0efd2e3f553aa8f18292c31734317486fbd948d6cb21e8a0f8c9bcf2e253a96417da4b7f24360531b5cad2a066c1d7435df22141576750eecb77b94ddc
pa-IN|32|5d0ab4080fb0c94d5d4056d7e4ea5d8f063b91acd0f26fc0a3e7410b42f91081681670f71c4757b133ff12efa8972b93b230897aaf72ac50727fa65001157ccc
pl|32|76a32279bd70dd88440de06b3e674c505ea93aef7617db5848beca642d79781cae9d73654b82ddc3dcea368c659ce052a7778341d275cbe60b942cce44a5e664
pt-BR|32|2d308a7aaf3a943fc5d5e621e5c6d3f1e8702672ea7402749e809eeb5b5a94736b872fcd2f8b6ffcd2f2ea1c70bdf7e2430a8d3a882699e892c33a08a5d8a94d
pt-PT|32|b5b81104532efd39bbe14bd3943be8b33ac1dbe7a1c3c7842378983e24cb4d34771006ab82c44d0e1eaa7475a44f4214d7a570da1b9ca4dc445edc28113e99c9
rm|32|5cf8b6f19ad62c6e99d744e45001f07b3095958bcede7cc12d276f8129338385cba9a919a0244b0f707f59fe676cd66bdef8c2369abbb0f979e3db55ec15e609
ro|32|3eba731f63bee35dc1f9ed96f9a40d308b75f91ddadffac824cad7178879ec59a14c0db2463fae7cca925613622fefa645c3d5554ee81c7652a561d51b89aa68
ru|32|be8d5529198069f1373e2186b4a2baf0474c939ab6d625fba263d99dc1773d77ebf232b3a39fb499e474f13f9fe298a499f0ddc800450c3b8bf37d273a7006af
sk|32|85128fc4f232c5aad8294a314c2fce02c75f07bd39fa37c7826dfcadb4e9c91e550027ca3042a002185cfcfb03a212be73a3cb18ca6fcc9d6228b6ab59a693ee
sl|32|4568595969f9686ea2fa73f684a59926d7f6650360ae3e00a90ae4be8eb44c703ab4cd2eaf9844acffd36d9fe6ba186cb47ffc8ba3accff89d5c58743e68b796
sq|32|47117a58a6dfc200f87519130fc371cdecdab829e6a5d7cb2d3eb4dab4a81fce108968c4a3ea235fa87cc30c62f885fc0341660afab141e34673b6fd0dd366f8
sr|32|30053cb1bebf6918023330faf4f54ac076f11c9baff8ccbc5f4499c6b2a80ca400131a4b062430b685bb4ed22d7baabfb2d454b91df5e7de44a84c7613731d76
sv-SE|32|30523415752b6edbad59f6fcd926e2dbb2ef0ad020a335abd038b56e843fe05cbefbb7661e4aeea6ed7696ed3ec7d1efd1c57a1c274df6cfeaac7be76dcb59b1
th|32|8eae55d1f11e409b194971dd2e2ef2f091c2ef36e21474ba1e1965787cf83048da64daefa3dcdab6fa7344f645e1fe250966f9f2ec0ac86c3cae3be8bdf69c14
tr|32|e5ed4a637502e730276bc59f46be35da81e09544a8d57d206d1d8f9a5a0358581a68206f00ea8893b54a82c8b8210d4c98c26ba92f43e6383426ad84004bdaf7
uk|32|5749b916fb1823124a11d5858129d7ccf5063c426d570fbfa9e358f1a6caf3c1c9005eac71133b7f8e1655c832e9a7748a6f96bad29d43815de66898f986712a
uz|32|e0a0a99b696b81f8915bbbfe4874c4540bd112d06550e976ff5d0e251d1ef839fb701930031cf03c88ac2c4ac5fc3d0faac0f0d87bb7acac3674ac78f50733fc
vi|32|257e33b49de353f3771cc5e56e9fd082e072a06a05eb872f075f8eba871d2e766dae70e075d3536360f04ea95062fbcee5b97e51ef0fd47ec5b34ff3780a8532
zh-CN|32|7078a77f2d9d3d52a419ae9f556bc0543725c52e50e8ff6493a27b4af499bb5fb4a32b3b48d6892cf3520151321c69faeed04b37d0654f831cb3a28ccc06c427
zh-TW|32|0edb1743a46aeb9dc5facc943a9856313f93a114518b9cf9cf3d22fa4636aeb638d313a3637ee16f0a9ea203685c85c720f9792f8749b505c0eaa0ab7049f990
af|64|8850e43636b38799b66afcc70ad748c4fa6a07923f705bdd04f60f0e8c13514ed7fcc9c463d390cfc91baa72b6e1d68187cd6fdfefb1c7eb3dc217f22818d7f8
ar|64|67e3577bd650618cea4b12bbb237ae5704ade55d638e94dbe74c0f97be1dfb9ef22f1e710e0a29a325942b1f402880b4b05c51208c070b09f79d34b6738ea6a3
ast|64|1c643c071eadb6ea101af55b827b8b88f9212d39b81ec2e6835dab934dc8d24fd3c595702df9a89b47d572b588a42518160bf402dd4d1169fbb16b0d8a57a26e
be|64|75ec69b9563558c92f72f4a36232e62ae0472d78184227f77dc7ce965c3406a16e6fb8cebc24a09b9ab8676f20a05c5d48ef4e32d564ba10e3a50170e9fa9255
bg|64|5849f08b08023d07a2527de48567cb9632168742f07d59a2d37ec0af277e2e292763573220ac0419544b670adfb732a0021e9061238e7eb5b25583dd81f87bd2
br|64|d9d500686ba25499ea8f6df10860008ce38759747bad44281a7616606957161000a2a1c0a1ec4559b323292c41f53bb94c0ba4d81115a67641a68c0a6c8ae5cd
ca|64|c6e44aa2431c0bcaf259e86fea51e9c2380b0bc38772bd9fdcfead845fc42bd24ce6028979aad780a87df8c28e6443bbaa696db7bcba8ca95ee2ce213c7da83a
cak|64|474758704611333973be3f57ca49c49b5c1eccaf4f4f8631b78ce7b5c55599338e5ddf18d8ee2a16a8721dbf95cdbff2bf31217091eaa3deba8bc5ae96be8159
cs|64|1b163ba50df80369de5ab47a1ead997a3c078001e64d060f8e79da8ffdfd0d5d639dd02b6f0102115ee94b6a69724ff121e3a2ecb18bf4f69ea873b6147817cd
cy|64|e0790e9d464921031d0a348a6c146091f87726f9c6b2a6cabf8bede881e95474d4df05e01b3e85a89b7105e007e3af1f204aa6bd9646e1fce4e2bfb9d5d2c750
da|64|c902366f577cd1d4bfcb073d3fe4c64e899027c098cd3d1a372d4fdd2dcbc44f466fea5dfda6e99319e4180d7feecca7a35f11019fe4d6bf43816ec4fd05557e
de|64|f07d924fdb2038d636e0f331e01c188523a593e92688d68480bfbe548ddb7b3def3d83369ada72bc28ce8c52ac3494dde0339a3ab6be5706559b62ecb4d6b679
dsb|64|66f1e64f70ef78cce193831032b8a05573494337adec72d693aa70fab2b61e95dd623db42604e32979be15108c07f7fe26d5f814313239eef98844a7c9e9bbb8
el|64|b0b6a6a449cbc8ac0fe6b36e8b189249020adf2da49cf5eb6c8a5bde83922cf668ba66589d5d67a1134e8b24f379631559baf842c68d333bf28e8ab4296ae83c
en-CA|64|670c4624e166e9939701f4761e3a5f33c878ba9bc5d0cad1514d37805abd8ded43b34834674ffad90f2f37e8e984a3df79776dc527461c11ef9d228ffbc8e7e8
en-GB|64|70a93e2436db3a179f10c8a6654ee445bfa5e22776cb4ece6a44cd86a510f7e39089260452b4e62c7ef825e221a92b3c5f3a74b3726fccc0bcad753d06ea64da
en-US|64|43092df40d326594546b676ab89a850176743ae8db15d6e977e7e4b3cade14c3fe674511b642bf9b9434f93a6bf9b50128ee7340554d934d1a7705335fabee53
es-AR|64|39154521e9cd903df6e77c72c27c206da3401c6ae9376a23a4c38c580ec56ae4450985ed7a3d912ec16757216bb139a22f7eb2def84cd0ca531ba08e3bed24dc
es-ES|64|3da4dbb26b3e7254b8e7a8397f5a6f2556f8ba00763dca4e9c2f6844e75490811f04e13f45f41f41025438074dd6f3f398a6add3ab84dc7b9751d0c38e7e71ed
es-MX|64|d4936e6fcd928fc4dc3c3bb9f8cac990939efda59d91fb7294aeeaad4d65d0efd2a0fb9c5bef3c592a26012a90c3e34c517763ebac85697b748f3e0ad3f75467
et|64|ace81fd298be352caadd88e9330bb983142286da31157dafa7a0aad243b1faf5b07834d728c3a6141e221fed2cccc9b92095a1fa30835a082af7d9ea0ab8a4bf
eu|64|2a3e2c9fd58d7633d24cd16d8d1032a6af498ec218c6d7b777e5cdd1686a700ea256f53e0723e3142959d37efbab529677c7d793875fa125a34dece318d91e95
fi|64|45cc04944d95503abf1e31d999185b521e07f69a91d3fa1f1cc1ca87cc987d85d9beaf078a61913e6ecf0a73a0e15071b12f4210a63658b88ec13fec8392954f
fr|64|ae4b4703e7d9717f80aa3ebad8dba97d8e085faa9427c557610f7b9cc9515f43e1f00cb1e041006f6305cf5b6e3eeacec9d36ff2805aa3ae839e9b5dd4a8123f
fy-NL|64|4624a28a0a7ffb8f3f83e10657adcf5d2b1367fa497c79ab0cd0c3d4374b4d30c85d3060106a61275ca9ac659bc6158a630670d044710a0bc9f3696c87c6cf3f
ga-IE|64|e3b575c00ac8fcfc21050c475d6c9e8a850d96d3642cd6debe30c997ba1a2f96fe6437a07a68e6194bd0eda8c436359c0513849def9d1d5bfcd3863d2aa4d0a1
gd|64|761a103db0b3609dd1ecd6da858ca0265dccfdb82de577793deddd76af5438afaedc2b0e44544fc3e210e10b358130f6f68c275aa604406e7b49626029464db0
gl|64|dd442e601ff108f349a9f1d8c986a03b5189693dd92c0832a4746f299a8119eb9bb1ee7aa05c9145590b39de7ababa41622b2b659be4b8913a3dca34866c9bfa
he|64|c3ed3ea8a9ce6adb87209520cfd49dc76fdef8c693abfcf2debc9851e1a3f55601e83e7fde20ddd58d46c440d2af2350a3353844145cd354771cce75eaf15632
hr|64|dc7073b10f3c5225b55ca386907f263df5cc5e2769bc0b9600c5046e994a66cf9b45a34e9a0268d76975d76b4520b80068b31a4063a68811cf1cece53e573a33
hsb|64|e367160404510849fb5b461ac07c53f80b3e2f1f9b0653258a68074db5f81b87d5f4839bdb3a864e1a55f2e91f34c4fb0760764901b29e86c9d122b83fe2f07a
hu|64|db92af47ed53d49d4abeefd158b06c2c8fc0fdcdee23b4f6f74e34f8c9aeeccae9a2e5a82e9d26a12069409041e9416c3cc50be15d88c9deb32c9b916fc348f3
hy-AM|64|1dcac5c8a67e1a6abb2aba181f1c8729091bf5272a83dd457d017c14ca2f0a7281f7f9fc28cf5ee90a610f6b0af2791aa542035f747fed59ca2ebf98b48ae6ae
id|64|2cb7093bc321aa8f856c43b5ea4bbaa21ed062e1c3f74dd51b5eb0afdc06a198f16a1a290c7e658f533acfb3a48454e849e1431b7b7d700f5255b108aa7b587a
is|64|49a484558730ad83421245bf68cced3a9fc6effd0058b82dbc62024314f3977c2b04da098ace71b0982e15bbd68aa26aea9d5d1f85b8e3c1f25d516a5d60a435
it|64|48cf16927665f3b2852e7cc02600440285d42784511db078b3c26943e1565c42b29fab5098f15242d31b91af0a3f0bb592faedd52873d06bb879ffe141cd1cd4
ja|64|d0ef6024b258a0a3111f9b16bed1a916a5b46b1f4c1dc4fd06ac92b5532e40963030eea626407c5ce262d87dfdcc7f77e964146ca975b228a84e74ac32c1099c
ka|64|ba395c35d9a66ddc8c4879f4ed0658bfe3e7822d3f9e82bbaf1c9420d3e4701b6e90928e891105dbcf266d0ddd2987d279ffd9c02a4b560596ca7f1ff00ff614
kab|64|921c22d8ce196ec7847c544d58020e6a5a475a3460f913dc59f985191227169f3b725ed9ac51b14402f2334f5e5c715b28314a5471f64fe5a09969171957f0f7
kk|64|1b988b456085ce434f0b1429627c12dac26327d3f1e9f7a9d3e8d86332baeba68f5c0c39ec520c05e8925b870db8317deffb38e96859382903f75559edc84fb6
ko|64|f34aa7946c6c7680448f42ed9919a6016a752dd0538c49c3d9ebfb20ed0d55e3f2543f4175b8e5ea9b65827efe9199e41d5ecc8e2af5a4fdbddb3834123b4190
lt|64|a6af53619b7de34c03d442c495a86307ae3c309a23bda516ac8d8c0f820bc92d330f789ed02d4d49ed308048fd0f78171a81ebd7c48339a6457e2fb12e9fb752
lv|64|99bb65783fb4c2218abf3f1c85013191aebe7e53b7f2f7da038a1284b2156f521c36808b9c34d1f25308515f025b6363d9ce0e6eea8476f6e8157e27b1c283c2
ms|64|fa9201dfb0f7f47f40d9166440704aadd7f225272a90abadec8ed540026bb67fa6f69ef711f010b3fc11a7fddd884ffa957359f5719d039058217650aabac6e0
nb-NO|64|6313a20ecce7b63b6090bddbcd9abf42de2233f04c3639922d7df691e272e038f53a7fe6768c1c527b4df26bdf4b89335d8ba94132e2f8334520870e66423a7a
nl|64|6e3279c362c02141c56522f9deced3b53ac69e90215ff2d6afa218fd7a19bfddf56d4364600e0ae19c120773342d88da26cf81d5d9fac136927505a29a0995e9
nn-NO|64|751cc458ed3212560f4d2e77ed33661d59a57fc8b820b030ca51e3c0e60d3cfbe677e3a0299d2d99159b4069fabfee861c0315410f672d3968526c37b8486d35
pa-IN|64|cc7f07436dbfa165dd63435b488351da36eee84acba05d027fee191e858b7f9d117d75219310a7edad7941775d5692462e551a8c894217a17f276994c831f697
pl|64|ad10852d5d5c3524da40ac9c297dc94a6e60e72a9fe97b333103997561c78d1ac291b1ce1844c1a4f3bf597ad5552b83748315e9915a8174df4b031dcaff93c1
pt-BR|64|5872e716f8eb492334aa9d704c7df3ad57e8e6950c28c1f64a8ff89e28fdc7fc518cfb1d3128e556258642b567f3f9a18f7c5dc65ae549aef6256b22adbd97e0
pt-PT|64|defd3c1161cef2d2262624c0386fe2797160fb1696d7d85a8fb210dca6e6f71f66688bf8320e334429bc027b2d9c23ce9ca468f09342d5fcb34197c8b11ccadf
rm|64|32a5e8a17cf915f5adf20b9995038731bcbc9053b35654a3b52fe01aa589e416ee6e35dfcbfb78af661331664f6899ddc70907a38c178c0bbb12ea37493144dd
ro|64|1fc1dfdbc5c90d5e27b84da0b5de96b747682490a21336ecde42ef567ee716219abf785d2818e102b2576873ab7ce7b24c61cb44248d7470b49172a117d825f2
ru|64|576e97631d41384d6046b855d4ed66bde9f69c9c0c5ed76496a6d0d9aee1c882dcf0e3a2b19542a0777731a315152fbbe6dbbbcdced0fd87e84a45d6b6076066
sk|64|14fa4f6a735715aab94e801e4576be001b94668f71e6c487e6289b77a3b0f2e3e18146de4ec5b7be95f14eb776182ab37ab649e123d9fccf9417444d94b96101
sl|64|65aa667aa3186f2ffce8de181c20ad91d861e1be7711e44e08b0e63de956a4c0f1a99a4d6acdcc546bd08361eba5b5f35c65ce54d16c64dd765c9917ebc248c3
sq|64|a4149c0be4eb62c89ba8d7e186538807d8ba7eea3717966065adf92a5205e0edff8639fb4ab120f3ba920486140efef3052d62c14cc8d86efabfd9317e346fa4
sr|64|15f9e029318df6384e4d120aa9850cb395f79de7d476bb596d1531f6895c5532cb30a74f059c56ceb6f51e771bec1e4eda031a0e76070c1a803bd589be98fc62
sv-SE|64|681c5fa6ede6dcca716f108bf55d4f22429c78543915c6cb185f2dc4cc959719fe1a9010385e5b4885bd68aacbedc4d0df9fb651c3cb445f2123639b422843f0
th|64|b4a204232b4677dfa738b45cc5299dbfe8b2519fe937e87430d669ca72b1c56df60fc8ba97864e79d23b60b5d72ca1e1541f74cc9b9dbdf280ef690ae35ddb47
tr|64|4827b06fedaea4ea2787b1b46e197a4d72cec6b1330a203a04d744ed0fd89965fc89e057b84c2803607ed85840fa53a44665730212e2295b335b3f2e22ee8a97
uk|64|31f61d1ec4a923645b8934ae88602b6a0a3fce16eac46b4efbab54ce3065584cdea993c543d46b6140f932088fea82de0d4c3e664798577a990557867f162f46
uz|64|06b6a6dddce464df4a8228e56d6138e6a41523f7ab51a6740502018332567f2f7307cc38edfa81be49c2aac2e486716646011836a4f2e3ea94dd724feb4b153e
vi|64|a86498ca833e22e61cb0ac5ff1959009320508f9294a0629f72b776dc6429b87f51d2e749dc4f8ae511b342ecd3b8ac45940fd7cea08c90eac6b39098604dc96
zh-CN|64|b923be2a1268ff0560be5099fe6c2db472d2f0c2ef550000c4dbee7acf058c987b93bd4d2d030e43aaadb8de424e766c3bd48a67fc4514c2d0f3dddcf72cbd2b
zh-TW|64|73c9181827ff944b1f3f8f1166cad00e1946e3c8521232ab4a397a0870ab292acc8f8a422fad2f9fe58fca31c8f6d37f38e582f3d51dae0a19c4638c0e4f0b3a

Virus Scan Results

thunderbirdesr.128.12.0.nupkg (451f1e09390e) - ## / 67

In cases where actual malware is found, the packages are subject to removal. Software sometimes has false positives. Moderators do not necessarily validate the safety of the underlying software, only that a package retrieves software from the official distribution point and/or validate embedded software against official distribution point (where distribution rights allow redistribution).

Chocolatey Pro provides runtime protection from possible malware.

Version History

Add to Builder	Version	Downloads	Last Updated	Status
	Thunderbird (ESR) 128.12.0	56	Sunday, July 6, 2025	Approved
	Thunderbird (ESR) 128.11.0	30	Tuesday, June 10, 2025	Approved

Release Notes

https://www.thunderbird.net/en-US/thunderbird/128.12.0esr/releaseNotes/

Dependencies

- chocolatey-core.extension (≥ 1.3.3)

Discussion for the Thunderbird (ESR) Package

Ground Rules:

This discussion is only about Thunderbird (ESR) and the Thunderbird (ESR) package. If you have feedback for Chocolatey, please contact the Google Group.
This discussion will carry over multiple versions. If you have a comment about a particular version, please note that in your comments.
The maintainers of this Chocolatey Package will be notified about new comments that are posted to this Disqus thread, however, it is NOT a guarantee that you will get a response. If you do not hear back from the maintainers after posting a message below, please follow up by using the link on the left side of this page or follow this link to contact maintainers. If you still hear nothing back, please follow the package triage process.
Tell us what you love about the package or Thunderbird (ESR), or tell us what needs improvement.
Share your experiences with the package, or extra configuration or gotchas that you've found.
If you use a url, the comment will be flagged for moderation until you've been whitelisted. Disqus moderated comments are approved on a weekly schedule if not sooner. It could take between 1-5 days for your comment to show up.

Resources

Events

Courses

86

56

06 Jul 2025

Thunderbird (ESR)

Thunderbird (ESR) 128.12.0

All Checks are Passing

Deployment Method: Individual Install, Upgrade, & Uninstall

Deployment Method:

1. Enter Your Internal Repository Url

2. Setup Your Environment

1. Ensure you are set for organizational deployment

2. Get the package into your environment

3. Copy Your Script

4. If applicable - Chocolatey configuration/installation

Package Parameters

Examples

Notes

Ground Rules: