Muehlenhoff has uploaded a new change for review. ( 
https://gerrit.wikimedia.org/r/405026 )

Change subject: Ensure all packages are updated when d-i installs security 
updates
......................................................................

Ensure all packages are updated when d-i installs security updates

Our current installation images for stretch are installing
linux-image-4.9.0-4-amd64 (which is shipped in the current images).

In the d-i stage where available security updates are installed (which
were released since the creation of the installation image), packages
are by default only installed with "upgrade", not "dist-upgrade".

Thus, linux-image-amd64 is currently held back which prevents the
installation of linux-image-4.9.0-5-amd64 which has been released via
security.debian.org.

Change the default to upgrade all packages via preseeding, so that
current stretch installations directly boot into a fixed kernel.

Change-Id: I7c36223fdf456c52d161469c2bcac835de761073
---
M modules/install_server/files/autoinstall/stretch.cfg
1 file changed, 4 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/26/405026/1

diff --git a/modules/install_server/files/autoinstall/stretch.cfg 
b/modules/install_server/files/autoinstall/stretch.cfg
index f1b1ef8..2e07c4a 100644
--- a/modules/install_server/files/autoinstall/stretch.cfg
+++ b/modules/install_server/files/autoinstall/stretch.cfg
@@ -7,5 +7,9 @@
 d-i    mirror/http/directory   string  /debian/
 d-i    mirror/http/proxy       string
 
+# Make sure all packages are upgraded when installing
+# security updates after the base install
+d-i    pkgsel/upgrade          select  full-upgrade
+
 # only useful when using nightly d-i builds & testing
 #d-i   mirror/udeb/suite       string  testing

-- 
To view, visit https://gerrit.wikimedia.org/r/405026
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I7c36223fdf456c52d161469c2bcac835de761073
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <mmuhlenh...@wikimedia.org>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to