I'd like to use Ansible to roll out package updates to my machines. But I'd like to test those updates on a local vm first. How is this usually achieved in the real world ?
- Do I "lock" every important package in my Ansible configuration to a specific version and then test every update ?
- Do I periodically get a list of upgradable packages and update them all at the same time on my vms, then on my servers ? I'd probably have some trouble keeping my servers and vms synchronized.
Is there a best practice for managing updates ?