Tested today on a stretch install on ms-be2001:
# apt-get -q -y -o DPkg::Options::=--force-confold install debdeploy-minion Reading package lists... Building dependency tree... Reading state information... Some packages could not be installed. This may mean that you have requested an impossible situation or if you are using the unstable distribution that some required packages have not yet been created or been moved out of Incoming. The following information may help to resolve the situation: The following packages have unmet dependencies: debdeploy-minion : Depends: salt-minion but it is not going to be installed E: Unable to correct problems, you have held broken packages.
The problem appears to be with libssl1.1 Breaks
# apt-get -s -o Debug::pkgProblemResolver=yes install debdeploy-minion Reading package lists... Done Building dependency tree Reading state information... Done Starting pkgProblemResolver with broken count: 1 Starting 2 pkgProblemResolver with broken count: 1 Investigating (0) libssl1.1:amd64 < 1.1.0e-2 @ii mK Ib > Broken libssl1.1:amd64 Breaks on salt-common:amd64 < none -> 2014.7.5+ds-1+wm2 @un uN > (<= 2016.3.3+ds-3) Considering salt-common:amd64 -2 as a solution to libssl1.1:amd64 19 Added salt-common:amd64 to the remove list Fixing libssl1.1:amd64 via keep of salt-common:amd64 Investigating (0) salt-minion:amd64 < none -> 2014.7.5+ds-1+wm2 @un uN Ib > Broken salt-minion:amd64 Depends on salt-common:amd64 < none | 2014.7.5+ds-1+wm2 @un uH > (= 2014.7.5+ds-1+wm2) Considering salt-common:amd64 -2 as a solution to salt-minion:amd64 -1 Holding Back salt-minion:amd64 rather than change salt-common:amd64 Investigating (1) debdeploy-minion:amd64 < none -> 0.0.9-1 @un puN Ib > Broken debdeploy-minion:amd64 Depends on salt-minion:amd64 < none | 2014.7.5+ds-1+wm2 @un uH > Considering salt-minion:amd64 -1 as a solution to debdeploy-minion:amd64 9999 Re-Instated salt-common:amd64 Re-Instated salt-minion:amd64 Investigating (1) libssl1.1:amd64 < 1.1.0e-2 @ii mK Ib > Broken libssl1.1:amd64 Breaks on salt-common:amd64 < none -> 2014.7.5+ds-1+wm2 @un uN > (<= 2016.3.3+ds-3) Considering salt-common:amd64 -2 as a solution to libssl1.1:amd64 19 Added salt-common:amd64 to the remove list Fixing libssl1.1:amd64 via keep of salt-common:amd64 Investigating (1) salt-minion:amd64 < none -> 2014.7.5+ds-1+wm2 @un uN Ib > Broken salt-minion:amd64 Depends on salt-common:amd64 < none | 2014.7.5+ds-1+wm2 @un uH > (= 2014.7.5+ds-1+wm2) Considering salt-common:amd64 -2 as a solution to salt-minion:amd64 -1 Holding Back salt-minion:amd64 rather than change salt-common:amd64 Investigating (2) debdeploy-minion:amd64 < none -> 0.0.9-1 @un puN Ib > Broken debdeploy-minion:amd64 Depends on salt-minion:amd64 < none | 2014.7.5+ds-1+wm2 @un uH > Considering salt-minion:amd64 -1 as a solution to debdeploy-minion:amd64 9999 Considering salt-minion:amd64 -1 as a solution to debdeploy-minion:amd64 9999 Done Some packages could not be installed. This may mean that you have requested an impossible situation or if you are using the unstable distribution that some required packages have not yet been created or been moved out of Incoming. The following information may help to resolve the situation: The following packages have unmet dependencies: debdeploy-minion : Depends: salt-minion but it is not going to be installed E: Unable to correct problems, you have held broken packages.