How do I prevent Vault from being upgraded when I patch my Linux hosts using a package manager?
Depending on your distribution of Linux, this can typically be accomplished by pinning the Vault package version, or by excluding the package when performing a system update.
In Red Hat-based distributions, this would like
yum update --exclude=vault
dnf update --exclude=vault
In Debian-based distributions, this would like:
apt-mark hold vault
For further information, please review your Linux distributions documentation.