One can also use a cache to hold deb and rpm files requested by the machines. (Works great when running hundreds of systems.)
I like “apt-cacher-ng”. It will do deb and rpm. https://wiki.debian.org/AptCacherNg
https://www.unix-ag.uni-kl.de/~bloch/acng/
Edit: better link
Apt-cacher-ng doesn’t tend to expire automatically. It can be configured to keep the last version regardless. https://www.unix-ag.uni-kl.de/~bloch/acng/html/maint.html#extrakeep