add possibility to hold docker package

defaults/main.yml

@@ -22,6 +22,7 @@ docker_apt_arch: amd64
 docker_apt_repository: "deb [arch={{ docker_apt_arch }}] {{ docker_repo_url }}/{{ ansible_distribution | lower }} {{ ansible_distribution_release }} {{ docker_apt_release_channel }}"
 docker_apt_ignore_key_error: true
 docker_apt_gpg_key: "{{ docker_repo_url }}/{{ ansible_distribution | lower }}/gpg"
+docker_apt_hold: false
 
 # Used only for RedHat/CentOS/Fedora.
 docker_yum_repo_url: "{{ docker_repo_url }}/{{ (ansible_distribution == 'Fedora') | ternary('fedora','centos') }}/docker-{{ docker_edition }}.repo"

tasks/main.yml

@@ -5,12 +5,30 @@
 - include_tasks: setup-Debian.yml
   when: ansible_os_family == 'Debian'
 
+- name: Remove hold on docker
+  dpkg_selections:
+    name: "{{ item }}"
+    selection: install
+  when: docker_apt_hold|default(false)|bool
+  with_items:
+  - docker-{{ docker_edition }}
+  - docker-{{ docker_edition }}-cli
+
 - name: Install Docker.
   package:
     name: "{{ docker_package }}"
     state: "{{ docker_package_state }}"
   notify: restart docker
 
+- name: Prevent docker from being upgraded
+  dpkg_selections:
+    name: "{{ item }}"
+    selection: hold
+  when: docker_apt_hold|default(false)|bool
+  with_items:
+  - docker-{{ docker_edition }}
+  - docker-{{ docker_edition }}-cli
+
 - name: Ensure Docker is started and enabled at boot.
   service:
     name: docker