| 
					
				 | 
			
			
				@@ -190,13 +190,13 @@ esac 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				 apt-get update 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				 export DEBIAN_FRONTEND=noninteractive 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				 apt-get install --yes \ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				-  apt-utils dialog msmtp-mta \ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				-  systemd-sysv locales tzdata haveged \ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+  apt-utils dialog file msmtp-mta \ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+  systemd-sysv polkitd locales tzdata haveged \ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				   $kernelPkg $grubPkg \ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				   iproute2 netbase \ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				-  ssh sudo molly-guard  \ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+  ssh sudo molly-guard \ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				   less vim-tiny bash-completion pwgen lsof \ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				-  dnsutils iputils-ping curl \ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+  dnsutils iputils-ping pciutils curl wget bzip2 \ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				   $extraPackages 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				  
			 | 
		
	
		
			
				 | 
				 | 
			
			
				 # Upgrade and clean up 
			 | 
		
	
	
		
			
				| 
					
				 | 
			
			
				@@ -266,6 +266,7 @@ systemctl enable systemd-resolved 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				 # Limit journald logging to 1 month, 1 GB in total and split files per week 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				 mkdir -p /etc/systemd/journald.conf.d/ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				 cat >/etc/systemd/journald.conf.d/retention.conf <<EOL 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+[Journal] 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				 MaxRetentionSec=1month 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				 SystemMaxUse=1G 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				 MaxFileSec=1week 
			 |