Instead of using public repos and pinning the version you want from them, you can run your own repo and import the versions you want. Running your own mirror is

Instead of using public repos and pinning the version you want from them, you can run your own repo and import the versions you want. Running your own mirror is a good idea anyway, and there are tools like http://www.aptly.info/ http://www.aptly.info/ which simplify the process of locking packages in environments.