Freezable APT repository

Originally created by Tails on #5926 (Redmine)

As a first important milestone before having reproducible builds, having a way to freeze the Debian repositories would allow to build a given Tails version with always the same set of packages.

This could be used for example to publish a point release that updates Tor Browser, but nothing else. If so, we could skip the RC.

Blueprint: https://tails.boum.org/blueprint/freezable_APT_repository/

Feature Branch: feature/5926-freezable-APT-repository

Subtasks

• tails/tails#9487
• tails/tails#9489
• tails/sysadmin#11412
• #11415 (closed)
• tails/tails#11445
• tails/tails#11447
• tails/tails#11448
• tails/tails#11490
• #11496 (closed)
• #11532 (closed)
• tails/tails#11612

Related issues

• Related to tails/tails#5987