From: Ralf Jung <post@ralfj.de>
Date: Sat, 16 Jun 2018 10:05:23 +0000 (+0200)
Subject: Install libpam-systemd before installing needrestart
X-Git-Url: https://git.ralfj.de/ansible.git/commitdiff_plain/413a688e37e2ca6fb569ec67f9b56b0b77f60d07

Install libpam-systemd before installing needrestart

Otherwise, needrestart can pull in libpam-systemd from backports, and therefore
upgrade the entire systemd to backports.
---

diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml
index d1c108c..0757dc7 100644
--- a/roles/base/tasks/main.yml
+++ b/roles/base/tasks/main.yml
@@ -11,11 +11,11 @@
   when: backports.rc != 0
   apt_repository: repo='deb http://httpredir.debian.org/debian {{ansible_distribution_release}}-backports main contrib non-free' state=present update_cache=yes
 - name: get rid of packages we do not want
-  apt: name=exim4-base,rpcbind state=absent autoremove=yes
+  apt: name=exim4-base,rpcbind,procmail,fetchmail state=absent autoremove=yes
+- name: install some basic tools
+  apt: name=nano,aptitude,rsync,git,mercurial,curl,apt-transport-https,psmisc,dnsutils,tree,htop,acl,libpam-systemd state=latest
 - name: install needrestart (from backports)
   apt: name=needrestart state=latest default_release={{ansible_distribution_release}}-backports
-- name: install some basic tools
-  apt: name=aptitude,rsync,git,mercurial,curl,apt-transport-https,psmisc,dnsutils,tree,htop,acl state=latest
 # configuration
 - name: configure root shell
   copy: