diff --git a/puppet/modules/site_apt/manifests/init.pp b/puppet/modules/site_apt/manifests/init.pp
index 798d0b84e905838dcc432b81df73ba924139bc37..60fe048364311efe2a9f9d299a7e2ed0852263f2 100644
--- a/puppet/modules/site_apt/manifests/init.pp
+++ b/puppet/modules/site_apt/manifests/init.pp
@@ -20,20 +20,24 @@ class site_apt {
     $apt_platform_codename = $platform_sources['apt']['codename']
   }
 
-  # needed on jessie hosts for getting pnp4nagios from testing
+  # needed on jessie hosts for getting python-treq from stretch
+  # see https://0xacab.org/leap/platform/issues/8836
   if ( $::operatingsystemmajrelease == '8' ) {
-    $use_next_release = true
+    $use_next_release   = true
+    $custom_preferences = template("site_apt/${::operatingsystem}/preferences_jessie.erb")
   } else {
-    $use_next_release = false
+    $use_next_release   = false
+    $custom_preferences = ''
   }
 
   class { 'apt':
-    custom_key_dir   => 'puppet:///modules/site_apt/keys',
-    debian_url       => $apt_url_basic,
-    security_url     => $apt_url_security,
-    backports_url    => $apt_url_backports,
-    use_next_release => $use_next_release,
-    repos            => 'main'
+    custom_key_dir     => 'puppet:///modules/site_apt/keys',
+    debian_url         => $apt_url_basic,
+    security_url       => $apt_url_security,
+    backports_url      => $apt_url_backports,
+    use_next_release   => $use_next_release,
+    custom_preferences => $custom_preferences,
+    repos              => 'main'
   }
 
   # enable http://deb.leap.se debian package repository
diff --git a/puppet/modules/site_apt/templates/Debian/preferences_jessie.erb b/puppet/modules/site_apt/templates/Debian/preferences_jessie.erb
new file mode 100644
index 0000000000000000000000000000000000000000..879885ddcc36552d33f0fdba190b446690b7342b
--- /dev/null
+++ b/puppet/modules/site_apt/templates/Debian/preferences_jessie.erb
@@ -0,0 +1,19 @@
+Explanation: Debian jessie
+Package: *
+Pin: release o=Debian,n=jessie
+Pin-Priority: 990
+
+Explanation: Debian stretch
+Package: *
+Pin: release o=Debian,n=stretch
+Pin-Priority: 1
+
+Explanation: Debian sid
+Package: *
+Pin: release o=Debian,n=sid
+Pin-Priority: 1
+
+Explanation: Debian fallback
+Package: *
+Pin: release o=Debian
+Pin-Priority: -10