3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
|
# File 'modules/openstack/manifests/serverpackages/caracal/bookworm.pp', line 3
class openstack::serverpackages::caracal::bookworm(
){
$bookworm_bpo_packages = [
'librados2',
'librgw2',
'librbd1',
'ceph-common',
'python3-ceph',
'python3-cephfs',
'python3-rados',
'python3-rgw',
'python3-rbd',
'python3-tenacity',
'libcephfs2',
'libradosstriper1',
]
apt::pin { 'openstack-caracal-bookworm-bpo':
package => join($bookworm_bpo_packages, ' '),
pin => 'release n=bookworm-backports',
priority => 1002,
}
# Force these packages to come from the nochange bpo
# even if they're available in the wikimedia repo.
# This gets us the versions we require.
$bookworm_bpo_nochange_packages = [
'uwsgi-plugin-python3',
'uwsgi-core',
'librdkafka1',
'python3-eventlet',
]
apt::pin { 'openstack-caracal-bookworm-bpo-nochange':
package => join($bookworm_bpo_nochange_packages, ' '),
pin => 'release n=bookworm-caracal-backports-nochange',
priority => 1002,
}
# Don't install systemd from bookworm-backports or bpo -- T247013
apt::pin { 'systemd':
pin => 'release n=bookworm',
package => 'systemd libpam-systemd',
priority => 1001,
}
apt::repository { 'openstack-caracal-bookworm':
uri => 'http://mirrors.wikimedia.org/osbpo',
dist => 'bookworm-caracal-backports',
components => 'main',
source => false,
keyfile => 'puppet:///modules/openstack/serverpackages/osbpo-pubkey.asc',
notify => Exec['openstack-caracal-bookworm-apt-upgrade'],
}
apt::repository { 'openstack-caracal-bookworm-nochange':
uri => 'http://mirrors.wikimedia.org/osbpo',
dist => 'bookworm-caracal-backports-nochange',
components => 'main',
source => false,
keyfile => 'puppet:///modules/openstack/serverpackages/osbpo-pubkey.asc',
notify => Exec['openstack-caracal-bookworm-apt-upgrade'],
}
# ensure apt can see the repo before any further Package[] declaration
# so this proper repo/pinning configuration applies in the same puppet
# agent run
exec { 'openstack-caracal-bookworm-apt-upgrade':
command => '/usr/bin/apt-get update',
require => [Apt::Repository['openstack-caracal-bookworm'],
Apt::Repository['openstack-caracal-bookworm-nochange']],
subscribe => [Apt::Repository['openstack-caracal-bookworm'],
Apt::Repository['openstack-caracal-bookworm-nochange']],
refreshonly => true,
logoutput => true,
}
Exec['openstack-caracal-bookworm-apt-upgrade'] -> Package <| title != 'gnupg' |>
}
|