[WIP] nginx: Drop preferences (pinning) for backports

TODO: on fait des trucs malins avec nginx et haproxy (on se repose sur
      l’exitence du fichier preferences pour tirer la bonne version), donc il
      va falloir remplacer cette logique par d’autres trucs malins (soit tirer
      les paquets avec -t, à traduire en « default_release » avec Ansible).

apt/files/bookworm_backports_preferences

@@ -1,3 +0,0 @@
-Package: *
-Pin: release a=bookworm-backports
-Pin-Priority: 50

apt/files/bullseye_backports_preferences

@@ -1,3 +0,0 @@
-Package: *
-Pin: release a=bullseye-backports
-Pin-Priority: 50

apt/files/buster_backports_preferences

@@ -1,3 +0,0 @@
-Package: *
-Pin: release a=buster-backports
-Pin-Priority: 50

apt/files/jessie_backports_preferences

@@ -1,3 +0,0 @@
-Package: *
-Pin: release a=jessie-backports
-Pin-Priority: 50

apt/files/stretch_backports_preferences

@@ -1,3 +0,0 @@
-Package: *
-Pin: release a=stretch-backports
-Pin-Priority: 50

apt/tasks/backports.deb822.yml

@@ -10,19 +10,9 @@
   tags:
     - apt
 
-- name: Backports configuration
-  ansible.builtin.copy:
-    src: '{{ ansible_distribution_release }}_backports_preferences'
-    dest: /etc/apt/preferences.d/0-backports-defaults
-    force: true
-    mode: "0640"
-  register: apt_backports_config
-  tags:
-    - apt
-
 - name: Apt update
   ansible.builtin.apt:
     update_cache: yes
-  when: apt_backports_sources is changed or apt_backports_config is changed
+  when: apt_backports_sources is changed
   tags:
     - apt

apt/tasks/backports.oneline.yml

@@ -17,16 +17,6 @@
   tags:
     - apt
 
-- name: Backports configuration
-  ansible.builtin.copy:
-    src: '{{ ansible_distribution_release }}_backports_preferences'
-    dest: /etc/apt/preferences.d/0-backports-defaults
-    force: true
-    mode: "0640"
-  register: apt_backports_config
-  tags:
-    - apt
-
 - name: Archived backport are accepted (jessie)
   ansible.builtin.lineinfile:
     dest: '/etc/apt/apt.conf.d/99no-check-valid-until'
@@ -42,4 +32,4 @@
     update_cache: yes
   tags:
     - apt
-  when: apt_backports_list is changed or apt_backports_config is changed
+  when: apt_backports_list is changed

apt/tests/spec/main_spec.rb

@@ -8,10 +8,6 @@ describe file("/etc/apt/sources.list.d/backports.list") do
   it { should be_file }
 end
 
-describe file("/etc/apt/preferences.d/0-backports-defaults") do
-  it { should be_file }
-end
-
 describe command("grep 'main contrib non-free' /etc/apt/sources.list.d/backports.list") do
   its(:stdout) { should_not be_empty }
   its(:exit_status) { should eq 0 }

evoacme/files/backports-certbot

@@ -1,3 +0,0 @@
-Package: certbot python-certbot python-acme python-cryptography python-openssl python-setuptools python-ndg-httpsclient python-pyasn1 python-pkg-resources
-Pin: release a=jessie-backports
-Pin-Priority: 999

evolinux-base/tests/spec/main_spec.rb

@@ -8,10 +8,6 @@ set :backend, :exec
 #   it { should be_file }
 # end
 #
-# describe file("/etc/apt/preferences.d/0-backports-defaults") do
-#   it { should be_file }
-# end
-#
 # describe command("grep 'main contrib non-free' /etc/apt/sources.list.d/backports.list") do
 #   its(:stdout) { should_not be_empty }
 #   its(:exit_status) { should eq 0 }

nginx/tasks/packages.yml

@@ -13,6 +13,7 @@
   ansible.builtin.apt:
     name: "{{ nginx_package_name | default(nginx_default_package_name) }}"
     state: present
+    default_release: "{{ ansible_distribution_release }}-backports"
   tags:
     - nginx
     - packages

nginx/tasks/packages_backports.yml

@@ -8,17 +8,6 @@
     - nginx
     - packages
 
-- name: Prefer Nginx packages from backports
-  ansible.builtin.template:
-    src: apt/nginx_preferences
-    dest: /etc/apt/preferences.d/999-nginx
-    force: true
-    mode: "0640"
-  register: nginx_apt_preferences
-  tags:
-    - nginx
-    - packages
-
 - name: APT cache is updated
   ansible.builtin.apt:
     update_cache: yes

nginx/templates/apt/nginx_preferences

@@ -1,3 +0,0 @@
-Package: nginx nginx-* libnginx-* libssl*
-Pin: release a={{ ansible_distribution_release }}-backports
-Pin-Priority: 999

packweb-apache/tasks/phpmyadmin.yml

@@ -11,18 +11,18 @@
     tasks_from: backports.yml
   when: ansible_distribution_major_version is version('10', '=')
 
-- name: Prefer phpMyAdmin package from backports (Debian 10)
+- name: Install phpmyadmin from backports (Debian 10)
-  ansible.builtin.template:
+  ansible.builtin.apt:
-    src: phpmyadmin_apt_preferences.j2
+    name: phpmyadmin
-    dest: /etc/apt/preferences.d/999-phpmyadmin
+    default_release: buster-backports
-    force: true
+    update_cache: yes
-    mode: "0644"
   when: ansible_distribution_major_version is version('10', '=')
 
 - name: Install phpmyadmin
   ansible.builtin.apt:
     name: phpmyadmin
     update_cache: yes
+  when: ansible_distribution_major_version is not version('10', '=')
 
 - name: Check if phpmyadmin default configuration is present
   ansible.builtin.stat:

packweb-apache/templates/phpmyadmin_apt_preferences.j2

@@ -1,3 +0,0 @@
-Package: phpmyadmin php-twig
-Pin: release a=buster-backports
-Pin-Priority: 999