The fact that you don't want an easy way to install apps outside of the initial deployment but (presumably) want an easy way to update your pre-existing apps would probably give you some trouble because they usually come from the same source. There are ways to blocklist or whitelist packages on some package managers but the specific details depends on the package manager.
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
replies: