diff --git a/roles/7-edu-apps/tasks/main.yml b/roles/7-edu-apps/tasks/main.yml
index 56d21fd28..e4ac330bc 100644
--- a/roles/7-edu-apps/tasks/main.yml
+++ b/roles/7-edu-apps/tasks/main.yml
@@ -11,7 +11,7 @@
 - name: KOLIBRI
   include_role:
     name: kolibri
-  when: kolibri_install and not (is_ubuntu_2404 or is_ubuntu_2410)    # Also covers is_linuxmint_22.  This is TEMPORARY until learningequality/kolibri#11316 brings Python 3.12 support to Kolibri 0.17 pre-releases.
+  when: kolibri_install and python_version is version('3.12', '<')    # Debian 13 still uses Python 3.11 (for now!) so really this just avoids Ubuntu 24.04 and 24.10 pre-releases at the moment.  CLARIF: This is all TEMPORARY until learningequality/kolibri#11316 brings Python 3.12 support to Kolibri 0.17 pre-releases (expected very soon).
 
 - name: KIWIX
   include_role:
diff --git a/test.yml b/test.yml
index 8eb2e9be0..7afdab202 100644
--- a/test.yml
+++ b/test.yml
@@ -19,12 +19,17 @@
   #- include_role:
   #    name: 0-init
 
-  - debug:
-      msg: "{{ 'changeme' | password_hash('sha512') }}"
+  # 2024-05-16: ansible-core 2.17 RC2 still hasn't fixed this, as they migrate from Python's crypt library to passlib:
+  # https://github.com/iiab/iiab/blob/485a619bfa082716ec848b5b34893dd3046175a8/roles/cups/tasks/install.yml#L70-L78
+  #- debug:
+  #    msg: "{{ 'changeme' | password_hash('sha512') }}"
       # msg: "{{ 'changeme' | password_hash('yescrypt') }}"    # crypt.crypt STILL doesn't support 'yescrypt' algorithm ?
 
   #- pause:
 
+  - debug:
+      var: "'3.12.3' is version('3.12', '<')"
+
   - name: DOUBLE UP to escape single quotes... '"''"' e.g. iiab.ini descriptions for azuracast, captiveportal, mosquitto, munin, nodejs, osm-vector-maps, sshd
     debug:
       msg: '"''"'    # OR: ''''    FAILS: '"\'"'