snarky answer - unplug your system from power, and if a laptop take out the battery
###Strongly suggest keeping security updates available!
You may use the Software & Updates section from the Control Center, be sure to review each tab.
There’s no way to do this 100%, unless you never install any software. Reason being, sometimes individual applications will depend on newer libraries, and that will cause a chain-reaction that will update things.
But to accomplish this, what you’d want to do is to disable the update manager, which you can do in Preferences > Startup Applications, and then you’d basically want to never use the apt commands.