From da368001e30f332d1992553f8f8a3b7df61fd8a1 Mon Sep 17 00:00:00 2001 From: Konrad Bucheli Date: Fri, 7 Jun 2024 11:36:35 +0200 Subject: [PATCH] document package version lock --- admin-guide/configuration/packages.md | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/admin-guide/configuration/packages.md b/admin-guide/configuration/packages.md index 083bda13..3be9d2ca 100644 --- a/admin-guide/configuration/packages.md +++ b/admin-guide/configuration/packages.md @@ -104,6 +104,29 @@ This list is merged over the full Hiera hierachy, so there is no need to copy ex This list can also be used to opt out packages from other, maybe inherited package groups. But unlike the `:absent` tag in a package list it will not uninstall a package when found. +### Version Lock + +If you have the need to freeze a software on given version, you can use `dnf versionlock`. First you need to install the `python3-dnf-plugin-versionlock` package (see above). + +Then on the node best run +``` +dnf versionlock add $PACKAGE +``` +for every package you do not wish to get updates installed any more. If there are newer packages you might test with `dnf update --assumeno` if it does not show your software any more, while other updates are still possible. Sometimes this can cause dependency resolution failures and you might need to add a version lock for one ore more packages which depend on the locked package. + +After you best put the resulting `/etc/dnf/plugins/versionlock.list` in Hiera with [`files::files`](distribute_files) for reproducability. + +#### Kernel Version Lock +A full kernel version lock needs to include a number of packages: +``` +dnf versionlock add kernel kernel-core kernel-modules kernel-tools kernel-tools-libs kernel-headers kernel-devel +``` +and if AFS is configured +``` +dnf versionlock add kmod-yfs +``` + + ### Install Debuginfo Packages The package repositories for debuginfo packages are disabled by default. To spontaneously install such a package, do