From 73ed85ea84689d0436e9c3a50e01deeefcff6a73 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=B6rg=20Sachse?= <joerg.sachse@slub-dresden.de> Date: Tue, 29 Nov 2022 12:26:49 +0100 Subject: [PATCH] fix: pin versions for all repair software packages --- tasks/install-repair-tools.yml | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/tasks/install-repair-tools.yml b/tasks/install-repair-tools.yml index eabc0ea..0b3b6c7 100644 --- a/tasks/install-repair-tools.yml +++ b/tasks/install-repair-tools.yml @@ -59,7 +59,16 @@ owner: "root" group: "root" mode: "750" - loop: "{{ tool_versions }}" + loop: "{{ tool_versions_local }}" + +- name: configure tool version pinning to avoid automatic nightly upgrades + ansible.builtin.template: + src: "etc/apt/preferences.d/pinning.j2" + dest: "/etc/apt/preferences.d/{{ item.package_name }}" + owner: "root" + group: "root" + mode: "750" + loop: "{{ tool_versions_public }}" # FHS 3.0 specifies the correct path for the config: # https://refspecs.linuxfoundation.org/FHS_3.0/fhs/ch04s09.html -- GitLab