# {{ ansible_managed }}
# Do NOT edit this file directly!

# Install updates as soon as they're available
Package: *
Pin: release a={{ ansible_lsb.codename }}-updates
Pin-Priority: 990

{% if 'backports' in group_names -%}
# Automatically packages from backports (those manually installed)
Package: *
Pin: release a={{ ansible_lsb.codename }}-backports
Pin-Priority: 200
{% endif %}

{% if inventory_hostname_short in non_free_packages.keys() -%}
# Automatically upgrade non-free firmwares (when manually installed)
Package: {{ non_free_packages[inventory_hostname_short] | join (' ') }}
Pin: version *
Pin-Priority: 200
{% endif %}

{% if ansible_processor[0] | search('^(Genuine)?Intel.*') and
      not (ansible_virtualization_role == 'guest' and ansible_virtualization_type == 'xen') -%}
# Automatically upgrade the microcode (when manually installed)
Package: intel-microcode iucode-tool
Pin: version *
Pin-Priority: 200
{% endif %}

# Never, ever install things from contrib or non-free unless they have been
# whitelisted above
Package: *
Pin: release c=contrib
Pin-Priority: -1

Package: *
Pin: release c=non-free
Pin-Priority: -1