From aa909a31051a661ed301f14060e660417dde4d46 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Wed, 25 Jun 2014 02:47:54 +0200
Subject: Support non-free firmwares. (Can be required :-()

Also, always install contrib's intel-microcode on Intel CPUs.
---
 roles/common/templates/etc/apt/preferences.j2 | 24 +++++++++++++++++++++++-
 1 file changed, 23 insertions(+), 1 deletion(-)

(limited to 'roles/common/templates/etc/apt/preferences.j2')

diff --git a/roles/common/templates/etc/apt/preferences.j2 b/roles/common/templates/etc/apt/preferences.j2
index 6a715b5..448248a 100644
--- a/roles/common/templates/etc/apt/preferences.j2
+++ b/roles/common/templates/etc/apt/preferences.j2
@@ -7,8 +7,30 @@ Pin: release a={{ ansible_lsb.codename }}-updates
 Pin-Priority: 990
 
 {% if 'backports' in group_names -%}
-# Install automatically new versions from backports
+# Automatically install new versions from backports
 Package: *
 Pin: release a={{ ansible_lsb.codename }}-backports
 Pin-Priority: 200
 {% endif %}
+
+{% if 'non-free' in group_names -%}
+# Install automatically new firmwares from backports
+Package: firmware-linux-nonfree
+Pin-Priority: 200
+{% endif %}
+
+{% if ansible_processor[0] | search("^Intel.*") -%}
+# Automatically upgrade the microcode
+Package: intel-microcode iucode-tool
+Pin-Priority: 200
+{% endif %}
+
+# Never, ever install things from contrib or non-free unless they have been
+# whitelisted above
+Package: *
+Pin: release c=contrib
+Pin-Priority: -1
+
+Package: *
+Pin: release c=non-free
+Pin-Priority: -1
-- 
cgit v1.2.3