Lock cloud-init external dependency versions

build/cloud-init/patches/requirements.patch

@@ -0,0 +1,52 @@
+diff -wpruN --no-dereference '--exclude=*.orig' a~/requirements.txt a/requirements.txt
+--- a~/requirements.txt	1970-01-01 00:00:00
++++ a/requirements.txt	1970-01-01 00:00:00
+@@ -1,34 +1,34 @@
+ # Pypi requirements for cloud-init to work
+
+ # Used for untemplating any files or strings with parameters.
+-jinja2
++jinja2==3.1.2
+
+ # This one is currently only used by the MAAS datasource. If that
+ # datasource is removed, this is no longer needed
+-oauthlib
++oauthlib==3.2.2
+
+ # This one is currently used only by the CloudSigma and SmartOS datasources.
+ # If these datasources are removed, this is no longer needed.
+ #
+-pyserial
++pyserial==3.5
+
+ # This is only needed for places where we need to support configs in a manner
+ # that the built-in config parser is not sufficent (ie
+ # when we need to preserve comments, or do not have a top-level
+ # section)...
+-configobj>=5.0.2
++configobj==5.0.8
+
+ # All new style configurations are in the yaml format
+-pyyaml
++pyyaml==6.0.1
+
+ # Requests handles ssl correctly!
+-requests
++requests==2.31.0
+
+ # For patching pieces of cloud-config together
+-jsonpatch
++jsonpatch==1.32
+
+ # For validating cloud-config sections per schema definitions
+-jsonschema
++jsonschema==4.17.3
+
+ # Used by DataSourceVMware to inspect the host's network configuration during
+ # the "setup()" function.
+@@ -37,4 +37,4 @@
+ # and still participate in instance-data by gathering the network in detail at
+ # runtime and merge that information into the metadata and repersist that to
+ # disk.
+-netifaces>=0.10.4
++netifaces==0.11.0

build/cloud-init/patches/series

@@ -0,0 +1 @@
+requirements.patch