(Temporarily) Rewrite phased updates using a keep-back approach

This is a lot closer to the original implementation in update-manager,
but still has a couple of differences that might cause bugs:

- When checking whether a version is a security update, we only
  check versions in between and not any later version. This happens
  mostly because we do not know the suite, so we just check if there
  is any version between the installed version and our target that
  is a security update

- We only keep already installed packages, as we run before the
  resolver. update-manager first runs the resolver, and then marks
  for keep all packages that were upgraded or newly installed that
  are phasing (afaict).

This approach has a significant caveat that if you have version 1
installed from a release pocket, version 2 is in security, and version
3 is phasing in updates, that it installs version 3 rather than 2
from security as the policy based implementation does.

It also means that apt install does not respect phasing and would
always install version 3 in such a scenario.

LP: #1979244

1 files changed, 1 insertions, 0 deletions

diff --git a/doc/examples/configure-index b/doc/examples/configure-index
index ce51153c3..07feea4dc 100644
--- a/doc/examples/configure-index
+++ b/doc/examples/configure-index
@@ -105,6 +105,7 @@ APT
      Upgrade-Allow-New "<BOOL>";
      Always-Include-Phased-Updates "<BOOL>";
      Never-Include-Phased-Updates "<BOOL>";
+     Phase-Policy "<BOOL>"; // internal
      Purge "<BOOL>";
      ReInstall "<BOOL>";
      Compile "<BOOL>";