[chef] Re: apt_package_hold or preventing version critical packages from being upgraded

[Brad Knowles < >]

On Dec 19, 2012, at 4:05 AM, Andrea Campi 
<
 >
 quoted Holger Amann 
<
 >:

> We have a lot of packages which are version critical like Postgres or 
> Erlang, and package upgrades/security fixes with apt-get 
> upgrade/dist-upgrade would lead to service restarts or incompatibilites to 
> other parts in case a never version is available, what needs to be avoided 
> in production.. On debian based systems this can be circumvented by doing a
> 
> echo 'packagename hold' | dpkg --set-selections

I'm confused.  Why not just lock the version number you want in the cookbook? 
 Then version the cookbooks in your repository.  If you want different 
versions of the same cookbook on different machines, you can control that 
through environments.

That way, Chef would never try to upgrade a package in the first place.

--
Brad Knowles 
<
 >
LinkedIn Profile: <http://tinyurl.com/y8kpxu>