I hope you're using a local package cache for puppet or ansible or even specifying via hash (think git commit)