Or you build golden images with Packer + Ansible or the like, and swap images out every N months. The work to get everything automated and configured can be a b

Or you build golden images with Packer + Ansible or the like, and swap images out every N months. The work to get everything automated and configured can be a bit daunting, but I much prefer the end result over doing continual upgrades.