I work on Ubuntu with some custom Kernel extensions which needs to be built upon each Kernel updates. Since, it is a dev. environment, sensible option was to lock the packages which I was using for development.
Below script disables automatic package updates on
Note: Do NOT disable security updates on production system!