add option for excludes

defaults/main.yml

@@ -0,0 +1,2 @@
+---
+update_packages_exclude: []

tasks/debian.yml

@@ -1,7 +1,20 @@
 ---
-- name: Upgrade packages
+- block:
+    - name: Add package lock
+      dpkg_selections:
+        name: python
+        selection: hold
+      loop: "{{ update_packages_exclude }}"
+
+    - name: Upgrade packages
       apt:
         update_cache: yes
         upgrade: dist
+
+    - name: Remove package lock
+      dpkg_selections:
+        name: python
+        selection: install
+      loop: "{{ update_packages_exclude }}"
   become: True
   become_user: root

tasks/redhat.yml

@@ -3,5 +3,6 @@
   yum:
     name: "*"
     state: latest
+    exclude: "{{ update_packages_exclude }}"
   become: True
   become_user: root