Hello Michael,
I am using dpkg, so dpkg --get-selections | grep "openssh-*".
apt-get upgrade, by default won't upgrade held packages.
There is a option in apt-get manual:
--ignore-hold
Ignore package Holds; This causes apt-get to ignore a hold
placed on a package. This may be
useful in conjunction with dist-upgrade to override a large
number of undesired holds.
Configuration Item: APT::Ignore-Hold.
Which, I assume then will overwrite the default behavior.
Thanks
Ben
On Friday, 26 September 2014 13:33:11 UTC+1, Michael DeHaan wrote:
>
> Where are you seeing the output of what is "held back" and so on? That's
> usually what you see during an update, so it seems some steps
> are not being executed by Ansible, and that's confusing me a little.
>
> Can you show the commands executed?
>
> Thanks!
>
> On Fri, Sep 26, 2014 at 5:57 AM, Benjamin Copeland <[email protected]
> <javascript:>> wrote:
>
>> - name: hold openssh-client only if OS is 12.04
>> shell: echo "openssh-client hold" | sudo dpkg --set-selections
>> when: ansible_distribution == 'Ubuntu' and ansible_distribution_release
>> == 'precise'
>>
>> - name: hold openssh-server only if OS is 12.04
>> shell: echo "openssh-server hold" | sudo dpkg --set-selections
>> when: ansible_distribution == 'Ubuntu' and ansible_distribution_release
>> == 'precise'
>>
>> - name: update and upgrade a server
>> apt: upgrade=safe update_cache=yes
>> sudo: yes
>>
>>
>> The package is "held" it dpkg.
>>
>> openssh-client hold
>> openssh-server hold
>>
>>
>> The state of apt before ansible:
>>
>> The following packages have been kept back:
>> linux-headers-generic linux-headers-virtual linux-image-virtual
>> linux-virtual openssh-client openssh-server
>>
>> After deploy:
>>
>> The following packages have been kept back:
>> linux-headers-generic linux-headers-virtual linux-image-virtual
>> linux-virtual
>>
>>
>> I would have thought, using the safe-upgrade should have stopped openssh
>> being upgraded.
>>
>> Is this a bug, or am I missing something?
>>
>> Thanks
>>
>> Ben
>>
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Ansible Project" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to [email protected] <javascript:>.
>> To post to this group, send email to [email protected]
>> <javascript:>.
>> To view this discussion on the web visit
>> https://groups.google.com/d/msgid/ansible-project/8cba22f6-9fb1-4a14-a7bc-a52cca604355%40googlegroups.com
>>
>> <https://groups.google.com/d/msgid/ansible-project/8cba22f6-9fb1-4a14-a7bc-a52cca604355%40googlegroups.com?utm_medium=email&utm_source=footer>
>> .
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>
--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/941f9249-a6c3-4585-8cc6-2f8c1af52181%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.