From 73ed85ea84689d0436e9c3a50e01deeefcff6a73 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rg=20Sachse?= <joerg.sachse@slub-dresden.de>
Date: Tue, 29 Nov 2022 12:26:49 +0100
Subject: [PATCH] fix: pin versions for all repair software packages

---
 tasks/install-repair-tools.yml | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/tasks/install-repair-tools.yml b/tasks/install-repair-tools.yml
index eabc0ea..0b3b6c7 100644
--- a/tasks/install-repair-tools.yml
+++ b/tasks/install-repair-tools.yml
@@ -59,7 +59,16 @@
     owner: "root"
     group: "root"
     mode: "750"
-  loop: "{{ tool_versions }}"
+  loop: "{{ tool_versions_local }}"
+
+- name: configure tool version pinning to avoid automatic nightly upgrades
+  ansible.builtin.template:
+    src: "etc/apt/preferences.d/pinning.j2"
+    dest: "/etc/apt/preferences.d/{{ item.package_name }}"
+    owner: "root"
+    group: "root"
+    mode: "750"
+  loop: "{{ tool_versions_public }}"
 
 # FHS 3.0 specifies the correct path for the config:
 # https://refspecs.linuxfoundation.org/FHS_3.0/fhs/ch04s09.html
-- 
GitLab