Compilation failed due to check function after apt versioned package installation.

[takryo00]

Summary

Compilation failed due to check function to update resource state after installation does not check the version of installed package.
If we configured to install specific version package, compilation failed all time.

Cause

The check function use installed package information from package manager by parse function. The parse function is implemented to take the information of version too, but the check function does not use the version information to check after installation it on completed.

check function

osconfig/config/package_resource.go

Lines 308 to 310 in cefab26

	case p.managedPackage.Apt != nil:
	desiredState = p.managedPackage.Apt.DesiredState
	_, pkgIns = aptInstalled.cache[p.managedPackage.Apt.PackageResource.GetName()]

parse function

osconfig/packages/apt_deb.go

Line 304 in cefab26

func parseInstalledDebpackages(data []byte) []*PkgInfo {

package cache use only "package name"

osconfig/config/package_resource.go

Lines 268 to 271 in cefab26

	cache.cache = map[string]struct{}{}
	for _, pkg := range pis {
	cache.cache[pkg.Name] = struct{}{}
	}

Reproduction of failure

1. create GCE instance with ubuntu 20.04 LT.
2. create OS Policy with configuration to install version specific nginx.
3. compilation failed all time.

id: setup-version-specified-nginx
mode: ENFORCEMENT
resourceGroups:
  - osFilter:
      osShortName: ubuntu
    resources:
      - id: install-pkg
        pkg:
          desiredState: INSTALLED
          apt:
            name: "nginx=1.18.0-0ubuntu1.2"

[adjackura]

Right now we do not support anything but package name for PackageResource, I am looking at the best way to implement making sure a specific version is installed but it will most likely not be by setting the apt version install format and instead a more generic version field.

[minor-fixes]

Any updates on the implementation status?

If this is still not implemented, is there a recommended workaround for ensuring a particular version of a package is installed?