From 3a5c6ee43aac37d2f385bd93091f89dd3dd84bc1 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Mon, 2 Oct 2023 12:09:13 -0400
Subject: [PATCH] install version lock before we try to hold pkgs

---
 salt/common/packages.sls | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/salt/common/packages.sls b/salt/common/packages.sls
index 0bf8616be..827cc6bf0 100644
--- a/salt/common/packages.sls
+++ b/salt/common/packages.sls
@@ -47,6 +47,11 @@ python-rich:
 
 {% if GLOBALS.os_family == 'RedHat' %}
 
+# install versionlock first so we can hold packages in the next states
+install_versionlock:
+  pkg.installed:
+    - name: python3-dnf-plugin-versionlock
+
 # holding these since openssl-devel-1:3.0.7-16.0.1.el9_2 seems to be a requirement for mariadb-devel-3:10.5.16-2.el9_0
 # https://github.com/Security-Onion-Solutions/securityonion/discussions/11443
 holdversion_openssl:
@@ -85,7 +90,6 @@ commonpkgs:
       - nmap-ncat
       - openssl: 1:3.0.7-16.0.1.el9_2
       - procps-ng
-      - python3-dnf-plugin-versionlock
       - python3-docker
       - python3-m2crypto
       - python3-packaging