etc and var customers

etc/apt/apt.conf.d/01autoremove

@@ -0,0 +1,59 @@
+APT
+{
+  NeverAutoRemove
+  {
+	"^firmware-linux.*";
+	"^linux-firmware$";
+	"^linux-image-[a-z0-9]*$";
+	"^linux-image-[a-z0-9]*-[a-z0-9]*$";
+  };
+
+  VersionedKernelPackages
+  {
+	# linux kernels
+	"linux-image";
+	"linux-headers";
+	"linux-image-extra";
+	"linux-modules";
+	"linux-modules-extra";
+	"linux-signed-image";
+	"linux-image-unsigned";
+	# kfreebsd kernels
+	"kfreebsd-image";
+	"kfreebsd-headers";
+	# hurd kernels
+	"gnumach-image";
+	# (out-of-tree) modules
+	".*-modules";
+	".*-kernel";
+	"linux-backports-modules-.*";
+	"linux-modules-.*";
+        # tools
+        "linux-tools";
+        "linux-cloud-tools";
+	# build info
+	"linux-buildinfo";
+	# source code
+	"linux-source";
+  };
+
+  Never-MarkAuto-Sections
+  {
+	"metapackages";
+	"contrib/metapackages";
+	"non-free/metapackages";
+	"restricted/metapackages";
+	"universe/metapackages";
+	"multiverse/metapackages";
+  };
+
+  Move-Autobit-Sections
+  {
+	"oldlibs";
+	"contrib/oldlibs";
+	"non-free/oldlibs";
+	"restricted/oldlibs";
+	"universe/oldlibs";
+	"multiverse/oldlibs";
+  };
+};

etc/apt/apt.conf.d/70debconf

@@ -0,0 +1,3 @@
+// Pre-configure all packages with debconf before they are installed.
+// If you don't like it, comment it out.
+DPkg::Pre-Install-Pkgs {"/usr/sbin/dpkg-preconfigure --apt || true";};

etc/apt/apt.conf.d/docker-autoremove-suggests

@@ -0,0 +1,16 @@
+# Since Docker users are looking for the smallest possible final images, the
+# following emerges as a very common pattern:
+
+#   RUN apt-get update \
+#       && apt-get install -y <packages> \
+#       && <do some compilation work> \
+#       && apt-get purge -y --auto-remove <packages>
+
+# By default, APT will actually _keep_ packages installed via Recommends or
+# Depends if another package Suggests them, even and including if the package
+# that originally caused them to be installed is removed.  Setting this to
+# "false" ensures that APT is appropriately aggressive about removing the
+# packages it added.
+
+# https://aptitude.alioth.debian.org/doc/en/ch02s05s05.html#configApt-AutoRemove-SuggestsImportant
+Apt::AutoRemove::SuggestsImportant "false";

etc/apt/apt.conf.d/docker-clean

@@ -0,0 +1,19 @@
+# Since for most Docker users, package installs happen in "docker build" steps,
+# they essentially become individual layers due to the way Docker handles
+# layering, especially using CoW filesystems.  What this means for us is that
+# the caches that APT keeps end up just wasting space in those layers, making
+# our layers unnecessarily large (especially since we'll normally never use
+# these caches again and will instead just "docker build" again and make a brand
+# new image).
+
+# Ideally, these would just be invoking "apt-get clean", but in our testing,
+# that ended up being cyclic and we got stuck on APT's lock, so we get this fun
+# creation that's essentially just "apt-get clean".
+DPkg::Post-Invoke { "rm -f /var/cache/apt/archives/*.deb /var/cache/apt/archives/partial/*.deb /var/cache/apt/*.bin || true"; };
+APT::Update::Post-Invoke { "rm -f /var/cache/apt/archives/*.deb /var/cache/apt/archives/partial/*.deb /var/cache/apt/*.bin || true"; };
+
+Dir::Cache::pkgcache "";
+Dir::Cache::srcpkgcache "";
+
+# Note that we do realize this isn't the ideal way to do this, and are always
+# open to better suggestions (https://github.com/debuerreotype/debuerreotype/issues).

etc/apt/apt.conf.d/docker-gzip-indexes

@@ -0,0 +1,10 @@
+# Since Docker users using "RUN apt-get update && apt-get install -y ..." in
+# their Dockerfiles don't go delete the lists files afterwards, we want them to
+# be as small as possible on-disk, so we explicitly request that Apt keep them
+# compressed on-disk too instead of decompressing them.
+
+# For comparison, an "apt-get update" layer without this on a pristine
+# "debian:wheezy" base image was "29.88 MB", where with this it was only
+# "8.273 MB".
+
+Acquire::GzipIndexes "true";

etc/apt/apt.conf.d/docker-no-languages

@@ -0,0 +1,5 @@
+# In Docker, we don't often need the "Translations" files, so we're just wasting
+# time and space by downloading them, and this inhibits that.  For users that do
+# need them, it's a simple matter to delete this file and "apt-get update". :)
+
+Acquire::Languages "none";

etc/apt/preferences.d/no-debian-php

@@ -0,0 +1,3 @@
+Package: php*
+Pin: release *
+Pin-Priority: -1

etc/apt/sources.list

@@ -0,0 +1,8 @@
+# deb http://snapshot.debian.org/archive/debian/20221114T000000Z buster main
+deb http://deb.debian.org/debian buster main contrib non-free 
+# deb http://snapshot.debian.org/archive/debian-security/20221114T000000Z buster/updates main
+deb http://deb.debian.org/debian-security buster/updates main
+# deb http://snapshot.debian.org/archive/debian/20221114T000000Z buster-updates main
+deb http://deb.debian.org/debian buster-updates main
+
+ 

etc/apt/sources.list.d/bullseye.list

@@ -0,0 +1,4 @@
+deb http://deb.debian.org/debian bullseye main contrib
+deb http://deb.debian.org/debian bullseye-updates main contrib
+deb http://deb.debian.org/debian bullseye-backports main contrib
+deb http://security.debian.org/debian-security/ bullseye-security main contrib