remove all yum updates and apt-get upgrades except from roles specifically designed to do this eg apt-get upgrade role