I found some duplicates of this question, but none of them answered exactly the thing I want to try.
I have one QA and one production server managed by chef solo. I want to version lock the apt repository to a specific version, so that i can upgrade to the latest version of a package in my chef recipe.
Is hold on ubuntu the right way to go for that? it seems i need to apply that for every package?
I'm just trying to work out how to update servers with chef in a secure manner. My preference would be I install updates on QA, test if it works, if so lock the repo in production to the same version numbers as on QA, install updates on production. Any other suggestions how to do it?
Thanks,