hold grub updates in vm

Signed-off-by: Martin Schurz <Martin.Schurz@telekom.de>
dev-sec · Dec 6, 2023 · d931068 · d931068
1 parent 62340c7
commit d931068
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/molecule/os_hardening_vm/prepare.yml b/molecule/os_hardening_vm/prepare.yml
@@ -12,6 +12,13 @@
         ansible_python_interpreter: /usr/bin/python3
       when: ansible_facts.distribution == 'Fedora'
 
+    - name: Block update of Grub, because of error
+      ansible.builtin.dpkg_selections:
+        name: grub-pc
+        selection: hold
+      when: ansible_os_family == 'Debian'
+
+
     - name: Run the equivalent of "apt-get update && apt-get upgrade"
       ansible.builtin.apt:
         upgrade: safe