aws / amazon-ssm-agent

An agent to enable remote management of your EC2 instances, on-premises servers, or virtual machines (VMs).
https://aws.amazon.com/systems-manager/
Apache License 2.0
1.03k stars 323 forks source link

Patch Manager does not honor apt priority #521

Open whyrg opened 1 year ago

whyrg commented 1 year ago

This is specifically about backport packages and how mindlessly installing backports gets into a dependency hell, along with broken functionality.

By default Debian sets backports to priority 100, whereas regular repos are at 500. So backport packages are not candidates for install in apt. Yet SSM patch manager will gleefully install these backports.

The only workaround is to add a wildcard reject for anything that's got ~bpoX+Y, so that's multiple entries for Debian9 and 10 (11 when?) and +1,2,3,etc... Haven't checked ubuntu yet.