I think this could work ok, but you might run into problems with updates
if the versions shift around... but I guess as long as you re
'shrinkwrap' on updates it should work.
We don't have any way to track
security issues for all the frozen set do we?
How often do you see us updating that set? everytime the hubs rpm updates? Or just when we want
to try and roll up to latest?
I don't think so off hand. Looks like pingou is listed as the sponsor so
when things are ready he would be the one to tell you are a go for a
staging instance(s) and all the other next steps (sops, playbooks,
nagios monitoring, etc).