bringup: devconfig: fix python3-apt debian issue

Downgrade python3-apt package to 2.9.6 during bringup to avoid Ansible
error with apt module (see below).

Build from source python3-apt using pip, and lock any possible future
upgrades of the package to avoid overwriting the build from source
deployment.

This is a workaround until python3-apt package in Debian testing is
fixed. It will also delay the bringup process considerably depending on
the guest.

The latest python3-apt releases 2.9.8 and 2.9.7 produces the following
error with Ansible:

Error message:

TASK [create_partition : Install partition creation base tools]
fatal: [4da8c43-xfs-reflink-4k]: FAILED! => {
    "changed": false
}

MSG:

python3-apt must be installed and visible from /usr/bin/python3.

Tested with Ansible version:

ii  ansible        9.5.1+dfsg-1 all
ii  ansible-core   2.17.1-1

ansible --version
ansible [core 2.17.1]
  ...
  python version = 3.12.6 (main, Sep  7 2024, 14:20:15) [GCC 14.2.0]
(/usr/bin/python3)
  jinja version = 3.1.3
  libyaml = True
ansible-playbook --version
ansible-playbook [core 2.17.1]
  ...
  executable location = /usr/bin/ansible-playbook
  python version = 3.12.6 (main, Sep  7 2024, 14:20:15) [GCC 14.2.0]
(/usr/bin/python3)
  jinja version = 3.1.3
  libyaml = True

Signed-off-by: Daniel Gomez <[email protected]>

Author: dkruces

playbooks/roles/devconfig/tasks/install-deps/debian/main.yml

@@ -1,4 +1,52 @@
 ---
+- name: Update package lists
+  become: true
+  become_method: sudo
+  ansible.builtin.shell:
+    cmd: >
+      DEBIAN_FRONTEND=noninteractive apt
+      -o Acquire::Check-Valid-Until=false update
+  when:
+    - ansible_os_family == "Debian"
+    - ansible_distribution_release == "trixie"
+  tags: vars_simple
+  register: apt_update_result
+  retries: 5
+  delay: 10
+  until: apt_update_result.rc == 0
+
+- name: Install required packages
+  become: true
+  become_method: sudo
+  ansible.builtin.shell:
+    cmd: >
+      DEBIAN_FRONTEND=noninteractive apt install -y
+      python3-setuptools libapt-pkg-dev python3-pip git
+  when:
+    - ansible_os_family == "Debian"
+    - ansible_distribution_release == "trixie"
+  tags: vars_simple
+
+- name: Install python-apt from Git with pip3
+  become: true
+  become_method: sudo
+  ansible.builtin.shell:
+    cmd: >
+      pip3 install
+      git+https://salsa.debian.org/apt-team/[email protected]
+      --break-system-packages
+  when:
+    - ansible_os_family == "Debian"
+    - ansible_distribution_release == "trixie"
+  tags: vars_simple
+
+- name: Hold python3-apt package version
+  become: yes
+  ansible.builtin.command: apt-mark hold python3-apt
+  when:
+    - ansible_os_family == "Debian"
+  tags: vars_simple
+
 - name: Remove unattended-upgrades package
   become: yes
   become_flags: 'su - -c'