From: Tom Hughes <tom@compton.nu>
Date: Thu, 12 Sep 2024 09:54:11 +0000 (+0100)
Subject: Use backports for kernel, firmware and microcode
X-Git-Url: https://git.openstreetmap.org./chef.git/commitdiff_plain/c4c1ad0640ba4be09143e3a0e70ce97146618f4b

Use backports for kernel, firmware and microcode
---

diff --git a/cookbooks/apt/recipes/default.rb b/cookbooks/apt/recipes/default.rb
index 1c7f6f504..2699b6a66 100644
--- a/cookbooks/apt/recipes/default.rb
+++ b/cookbooks/apt/recipes/default.rb
@@ -38,6 +38,8 @@ apt_update "/etc/apt/sources.list" do
   action :nothing
 end
 
+dpkg_arch = node[:packages][:systemd][:arch]
+
 if platform?("debian")
   archive_host = "deb.debian.org"
   archive_security_host = archive_host
@@ -46,8 +48,8 @@ if platform?("debian")
   archive_suites = %w[main updates backports security]
   archive_components = %w[main contrib non-free non-free-firmware]
   backport_packages = case node[:lsb][:codename]
-                      when "bookworm" then %w[exim4 libosmium osm2pgsql otrs2 pyosmium smartmontools systemd]
-                      else %w[]
+                      when "bookworm" then %W[amd64-microcode exim4 firmware-free firmware-nonfree intel-microcode libosmium linux-signed-#{dpkg_arch} osm2pgsql otrs2 pyosmium smartmontools systemd]
+                      else %W[]
                       end
 elsif intel?
   archive_host = if node[:country]