From ec0cf38d12f5c6c9282e83d750702555711f0be6 Mon Sep 17 00:00:00 2001 From: yodax Date: Fri, 28 Jul 2017 13:45:44 +0200 Subject: [PATCH] Lower the priority for the php7 PPA. This prevents openssl being installed from the PPA. --- setup/system.sh | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/setup/system.sh b/setup/system.sh index 791f2776..cd713cb2 100755 --- a/setup/system.sh +++ b/setup/system.sh @@ -127,6 +127,21 @@ apt_install python3 python3-dev python3-pip \ hide_output add-apt-repository -y ppa:ondrej/php apt_add_repository_to_unattended_upgrades LP-PPA-ondrej-php:trusty + +# The PHP7 PPA has an updated openssl package that breaks our setup. It has some extra patches. +# For instance it completely disables SSLv3. Which isn't bad, but not thoroughly tested with our setup. +# So we will instruct apt to ignore the package. +# +# Pin priorities are explained here: https://www.debian.org/doc/manuals/apt-howto/ch-apt-get.en.html#s-pin +# +# We lower the priority of the PPA so apt will prefer the packages from Ubuntu +cat > /etc/apt/preferences.d/openssl <