Surely you maintain your start-up tech on F/OSS, as most of the internet does, so just use the person who types 'apt-get update && apt-get upgrade' on your service to do the same on your local VM.
Or leave keep it local and literally never update it.
It wont melt.