Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I maintain a few dozen servers all running Lucid. Setting up a local mirror is probably a good idea anyway, but I also have a unique need.

The (ec2 instance) servers are all configured to get security updates only. That's how I want it. The problem is that when I create a new server/ec2 instance and download packages, those packages are completely current and out-of-sync with the rest of the cluster. I can use Chef to pin explicit package versions, but then minor updates will make whatever we pin unavailable.

So what I'd like to do is this... I want an apt mirror that mirrors the Lucid repository, but only gets security updates, not regular ones. Then by pointing all my servers to that mirror, I can keep everything running the same version, but also avoid unnecessary updates.

Setting up a mirror itself with apt-mirror seems simple enough, but what I'm missing is how to make sure the mirror only does security. How do I setup an apt mirror that only gets and propagates security updates? I feel like I'm missing something obvious.

share|improve this question
Rightscale provides an Ubuntu mirror within ec2. Which is nice because bandwidth between EC2 instances is free. Edit your /etc/apt/sources.list to only contain: deb lucid-security main restricted multiverse universe – andrewsomething Jan 19 '12 at 18:16
Thanks, Andrewsomething. Although the issue is less bandwidth and more filtering of updates. – Ken Kinder Feb 23 '12 at 16:53
up vote 5 down vote accepted

When you set up your mirror, in your sources list /etc/apt/mirror.list only include the security archives

deb lucid-security
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.