diff --git a/defaults/main.yml b/defaults/main.yml
new file mode 100644
index 0000000..5a84262
--- /dev/null
+++ b/defaults/main.yml
@@ -0,0 +1,2 @@
+---
+update_packages_exclude: []
diff --git a/tasks/debian.yml b/tasks/debian.yml
index 1f9fe50..ec11374 100644
--- a/tasks/debian.yml
+++ b/tasks/debian.yml
@@ -1,7 +1,20 @@
 ---
-- name: Upgrade packages
-  apt:
-    update_cache: yes
-    upgrade: dist
+- block:
+    - name: Add package lock
+      dpkg_selections:
+        name: python
+        selection: hold
+      loop: "{{ update_packages_exclude }}"
+
+    - name: Upgrade packages
+      apt:
+        update_cache: yes
+        upgrade: dist
+
+    - name: Remove package lock
+      dpkg_selections:
+        name: python
+        selection: install
+      loop: "{{ update_packages_exclude }}"
   become: True
   become_user: root
diff --git a/tasks/redhat.yml b/tasks/redhat.yml
index ff67186..2e6ed52 100644
--- a/tasks/redhat.yml
+++ b/tasks/redhat.yml
@@ -3,5 +3,6 @@
   yum:
     name: "*"
     state: latest
+    exclude: "{{ update_packages_exclude }}"
   become: True
   become_user: root