Setting Up a Local AP Mirror

The entire network is air gapped, except for a server that functions as a gateway to get to up dates for the rest of them. The proper way to do it is just arsinc canonical exposes their apt mirrors via rsink so you can literally just arsink the entire thing down to a local server. There are arguments to be made for also taking over the there separate security host name and having all your up dates come locally.