Adding debconf script.

Signed-off-by: Daniel Baumann <daniel.baumann@open-infrastructure.net>

6 files changed, 2415 insertions, 0 deletions

diff --git a/share/scripts/debconf b/share/scripts/debconf
new file mode 100755
index 0000000..5b73bd0
--- /dev/null
+++ b/share/scripts/debconf
@@ -0,0 +1,974 @@
+#!/bin/sh
+
+# Open Infrastructure: container-tools
+# Copyright (C) 2014-2016 Daniel Baumann <daniel.baumann@open-infrastructure.net>
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+set -e
+
+SCRIPT="${0}"
+
+CONFIG="/etc/container-tools/config"
+MACHINES="/var/lib/machines"
+
+Parameters ()
+{
+	LONG_OPTIONS="bind:,script:,name:,preseed-file:"
+	OPTIONS="b:,s:,n:,p:"
+
+	PARAMETERS="$(getopt --longoptions ${LONG_OPTIONS} --name=${SCRIPT} --options ${OPTIONS} --shell sh -- ${@})"
+
+	if [ "${?}" != "0" ]
+	then
+		echo "'${SCRIPT}': getopt exit" >&2
+		exit 1
+	fi
+
+	eval set -- "${PARAMETERS}"
+
+	while true
+	do
+		case "${1}" in
+			-b|--bind)
+				# ignore
+				shift 2
+				;;
+
+			--cnt.autostart)
+				# ignore
+				shift 2
+				;;
+
+			-s|--script)
+				# ignore
+				shift 2
+				;;
+
+			-n|--name)
+				NAME="${2}"
+				shift 2
+				;;
+
+			--preseed-file)
+				PRESEED_FILE="${2}"
+				shift 2
+				;;
+
+			--)
+				shift 1
+				break
+				;;
+
+			*)
+				echo "'${SCRIPT}': getopt error" >&2
+				exit 1
+				;;
+		esac
+	done
+}
+
+Usage ()
+{
+	echo "Usage: container create -n|--name NAME -s|--script ${SCRIPT} [-p|--preseed-file FILE]" >&2
+	exit 1
+}
+
+Parameters "${@}"
+
+if [ -z "${NAME}" ]
+then
+	Usage
+fi
+
+if [ -e "${MACHINES}/${NAME}" ]
+then
+	echo "'${NAME}': container already exists" >&2
+	exit 1
+fi
+
+if [ ! -x /usr/sbin/debootstrap ]
+then
+	echo "'${NAME}': /usr/sbin/debootstrap - no such file." >&2
+	exit 1
+fi
+
+if [ "$(id -u)" -ne 0 ]
+then
+	echo "'${NAME}': need root privileges" >&2
+	exit 1
+fi
+
+Chroot ()
+{
+	CHROOT="${1}"
+	shift
+
+	chroot "${CHROOT}" /usr/bin/env -i \
+		LC_ALL="C" PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/games:/usr/games" TERM="${TERM}" \
+		DEBIAN_FRONTEND="${DEBCONF_FRONTEND}" DEBIAN_PRIORITY="${DEBCONF_PRIORITY}" \
+		DEBCONF_NONINTERACTIVE_SEEN="true" DEBCONF_NOWARNINGS="true" \
+		ftp_proxy="${ftp_proxy}" http_proxy="${http_proxy}" \
+		${@}
+}
+
+Upgrade_system ()
+{
+	DIRECTORY="${1}"
+
+	# Mount pseudo-filesystems
+	mount -o bind /dev/pts "${DIRECTORY}/dev/pts"
+	mount -o bind /proc "${DIRECTORY}/proc"
+	mount -o bind /sys "${DIRECTORY}/sys"
+
+	# Bind mount systems apt cache
+	mount -o bind /var/cache/apt/archives "${DIRECTORY}/var/cache/apt/archives"
+
+	# Disable dpkg syncing
+
+cat > "${DIRECTORY}/etc/dpkg/dpkg.cfg.d/container-tools" << EOF
+force-unsafe-io
+EOF
+
+	# Create policy-rc.d file
+
+cat > "${DIRECTORY}/usr/sbin/policy-rc.d" << EOF
+#!/bin/sh
+echo "All runlevel operations denied by policy" >&2
+exit 101
+EOF
+
+	chmod 0755 "${DIRECTORY}/usr/sbin/policy-rc.d"
+
+	# Upgrade system
+	Chroot "${DIRECTORY}" "apt-get update"
+	Chroot "${DIRECTORY}" "apt-get --yes --option APT::Force-LoopBreak=true upgrade"
+	Chroot "${DIRECTORY}" "apt-get --yes --option APT::Force-LoopBreak=true dist-upgrade"
+
+	# Unmount systems apt cache
+	umount "${DIRECTORY}/var/cache/apt/archives"
+
+	Chroot "${DIRECTORY}" "apt-get clean"
+}
+
+Cleanup_system ()
+{
+	DIRECTORY="${1}"
+
+	Chroot "${DIRECTORY}" "apt-get --yes autoremove"
+	Chroot "${DIRECTORY}" "apt-get clean"
+
+	# Cleanup
+	rm -f "${DIRECTORY}/etc/dpkg/dpkg.cfg.d/container-tools"
+	rm -f "${DIRECTORY}/usr/sbin/policy-rc.d"
+
+	# Unmount pseudo-filesystems
+	umount "${DIRECTORY}/dev/pts"
+	umount "${DIRECTORY}/proc"
+	umount "${DIRECTORY}/sys"
+}
+
+Debconf ()
+{
+	# Configure local debconf
+	mkdir -p /tmp/container-tools
+	DEBCONF_TMPDIR="$(mktemp -d -p /tmp/container-tools -t $(basename ${0}).XXXX)"
+	export DEBCONF_TMPDIR
+
+	mkdir -p "${DEBCONF_TMPDIR}/debconf"
+
+cat > "${DEBCONF_TMPDIR}/debconf.systemrc" << EOF
+Config: configdb
+Templates: templatedb
+
+Name: config
+Driver: File
+Mode: 644
+Reject-Type: password
+Filename: ${DEBCONF_TMPDIR}/debconf/config.dat
+
+Name: passwords
+Driver: File
+Mode: 600
+Backup: false
+Required: false
+Accept-Type: password
+Filename: ${DEBCONF_TMPDIR}/debconf/passwords.dat
+
+Name: configdb
+Driver: Stack
+Stack: config, passwords
+
+Name: templatedb
+Driver: File
+Mode: 644
+Filename: ${DEBCONF_TMPDIR}/debconf/templates.dat
+EOF
+
+	DEBCONF_SYSTEMRC="${DEBCONF_TMPDIR}/debconf.systemrc"
+	export DEBCONF_SYSTEMRC
+}
+
+Debootstrap ()
+{
+	DIRECTORY="${1}"
+
+	# FIXME: trim down, debootstrap variants?
+	case "${MODE}" in
+		debian)
+			INCLUDE="--include=ifupdown,locales,libui-dialog-perl,dialog,isc-dhcp-client,netbase,net-tools,iproute,wget,dbus"
+			;;
+
+		progress-linux)
+			INCLUDE="--include=apt-utils,ifupdown,locales-all,libui-dialog-perl,dialog,isc-dhcp-client,netbase,net-tools,iproute,openssh-server,wget,dbus,libpam-systemd"
+			;;
+	esac
+
+	mkdir -p "$(dirname ${DIRECTORY})"
+	debootstrap --verbose --arch=${ARCHITECTURE} --components=${PARENT_ARCHIVE_AREAS} ${INCLUDE} \
+		${PARENT_DISTRIBUTION} "${DIRECTORY}" ${PARENT_MIRROR}
+}
+
+Configure_apt ()
+{
+	DIRECTORY="${1}"
+
+	# Configure apt
+	rm -f "${DIRECTORY}/etc/apt/sources.list"
+
+	PARENT_AREA="$(echo ${PARENT_ARCHIVE_AREAS} | sed -e 's|,| |g')"
+	PARENT_DIST="$(echo ${PARENT_DISTRIBUTION} | sed -e 's|-backports||')"
+
+	echo "deb ${PARENT_MIRROR} ${PARENT_DIST} ${PARENT_AREA}" > "${DIRECTORY}/etc/apt/sources.list.d/debian.list"
+
+	case "${MODE}" in
+		progress-linux)
+			AREA="$(echo ${ARCHIVE_AREAS} | sed -e 's|,| |g')"
+			DIST="$(echo ${DISTRIBUTION} | sed -e 's|-backports||')"
+
+			echo "deb ${MIRROR} ${DIST} ${AREA}" > "${DIRECTORY}/etc/apt/sources.list.d/progress-linux.list"
+
+			case "${DISTRIBUTION}" in
+				*-backports)
+					echo "deb ${MIRROR} ${DIST}-backports ${AREA}" >> "${DIRECTORY}/etc/apt/sources.list.d/progress-linux.list"
+					;;
+			esac
+
+cat > "${DIRECTORY}/etc/apt/preferences.d/progress-linux.pref" << EOF
+Package: *
+Pin: release n=${DIST}
+Pin-Priority: 999
+
+Package: *
+Pin: release n=${DIST}-security
+Pin-Priority: 999
+
+Package: *
+Pin: release n=${DIST}-updates
+Pin-Priority: 999
+
+Package: *
+Pin: release n=${DIST}-lts
+Pin-Priority: 999
+
+Package: *
+Pin: release n=${DIST}-extras
+Pin-Priority: 999
+EOF
+			case "${DISTRIBUTION}" in
+				*-backports)
+
+cat >> "${DIRECTORY}/etc/apt/preferences.d/progress-linux.pref" << EOF
+
+Package: *
+Pin: release n=${DIST}-backports
+Pin-Priority: 999
+
+Package: *
+Pin: release n=${DIST}-backports-extras
+Pin-Priority: 999
+EOF
+
+					;;
+
+				*)
+
+cat >> "${DIRECTORY}/etc/apt/preferences.d/progress-linux.pref" << EOF
+
+#Package: *
+#Pin: release n=${DIST}-backports
+#Pin-Priority: 999
+
+#Package: *
+#Pin: release n=${DIST}-backports-extras
+#Pin-Priority: 999
+EOF
+
+					;;
+			esac
+
+			# Import archive keys
+			case "${DISTRIBUTION}" in
+				*-backports)
+					KEYS="project/pgp/archive-key-${DIST}.asc project/pgp/archive-key-${DIST}-backports.asc"
+					;;
+
+				*)
+					KEYS="project/pgp/archive-key-${DIST}.asc"
+					;;
+			esac
+
+			for KEY in ${KEYS}
+			do
+				KEY_NAME="$(basename ${KEY})"
+				echo "P: Fetching archive-key ${KEY_NAME}..."
+
+				wget -q "${MIRROR}/${KEY}" -O "${DIRECTORY}/key.asc"
+				wget -q "${MIRROR}/${KEY}.sig" -O "${DIRECTORY}/key.asc.sig"
+
+				if [ -e /usr/bin/gpgv ]
+				then
+					if [ -e /usr/share/keyrings/debian-keyring.gpg ] || [ -e /usr/share/keyrings/debian-maintainers.gpg ]
+					then
+						KEY_VALID=""
+
+						for KEYRING in /usr/share/keyrings/debian-keyring.gpg /usr/share/keyrings/debian-maintainers.gpg
+						do
+							if [ -e "${KEYRING}" ]
+							then
+								echo -n "I: Verifying archive-key ${KEY_NAME} against $(basename ${KEYRING} .gpg | sed -e 's|-keyring||') keyring..."
+
+								# FIXME: doesn't work anymore when the template eventually be run with 'set -e'
+								/usr/bin/gpgv --quiet --keyring ${KEYRING} "${DIRECTORY}/key.asc.sig" "${DIRECTORY}/key.asc" > /dev/null 2>&1 && KEY_VALID="true" && break
+							fi
+						done
+
+						case "${KEY_VALID}" in
+							true)
+								echo " successful."
+								;;
+
+							*)
+								echo " failed."
+								return 1
+								;;
+						esac
+					else
+						echo "W: Skipping archive-key ${KEY_NAME} verification, debian-keyring not available..."
+					fi
+				else
+					echo "W: Skipping archive-key ${KEY_NAME} verification, gpgv not available..."
+				fi
+
+				echo "P: Importing archive-key ${KEY_NAME}..."
+
+				Chroot "${DIRECTORY}" "apt-key add key.asc"
+				rm -f "${DIRECTORY}/key.asc"
+				rm -f "${DIRECTORY}/key.asc.sig"
+			done
+
+			Chroot "${DIRECTORY}" "apt-get update"
+			;;
+	esac
+}
+
+Deconfigure_system ()
+{
+	DIRECTORY="${1}"
+
+	# Configure fstab
+
+cat > "${DIRECTORY}/etc/fstab" << EOF
+# /etc/fstab: static file system information.
+#
+# Use 'blkid' to print the universally unique identifier for a
+# device; this may be used with UUID= as a more robust way to name devices
+# that works even if disks are added and removed. See fstab(5).
+#
+# <file system> <mount point>   <type>  <options>       <dump>  <pass>
+
+EOF
+
+	# Fix /etc/mtab
+	rm -f "${DIRECTORY}/etc/mtab"
+	ln -s /proc/self/mounts "${DIRECTORY}/etc/mtab"
+
+	# Temporary hack for dpkg
+	if [ -e "${DIRECTORY}/etc/dpkg/origins/default" ]
+	then
+		rm -f "${DIRECTORY}/etc/dpkg/origins/default"
+		Chroot "${DIRECTORY}" "dpkg-reconfigure base-files"
+	fi
+
+	# Temporary hack for base-files
+	for FILE in motd.tail motd profile
+	do
+		if [ -e "${DIRECTORY}/usr/share/base-files/${FILE}" ]
+		then
+			rm -f "${DIRECTORY}/etc/${FILE}"
+			cp "${DIRECTORY}/usr/share/base-files/${FILE}" "${DIRECTORY}/etc"
+		fi
+	done
+
+	# Temporary hack for readline
+	if [ -e "${DIRECTORY}/etc/inputrc" ]
+	then
+		rm -f "${DIRECTORY}/etc/inputrc"
+		cp "${DIRECTORY}/usr/share/readline/inputrc" "${DIRECTORY}/etc"
+	fi
+
+	# Temporary hack for sysvinit
+	if [ -e "${DIRECTORY}/etc/inittab" ]
+	then
+		rm -f "${DIRECTORY}/etc/inittab"
+		cp "${DIRECTORY}/usr/share/sysvinit/inittab" "${DIRECTORY}/etc/inittab"
+	fi
+
+	# Removing resolv.conf
+	#rm -f "${DIRECTORY}/etc/resolv.conf"
+	# FIXME: needs to stay for the moment
+	rm -f "${DIRECTORY}/etc/resolv.conf"
+	cp /etc/resolv.conf "${DIRECTORY}/etc"
+
+	# Removing hosts/hostname
+	rm -f "${DIRECTORY}"/etc/hosts
+	rm -f "${DIRECTORY}"/etc/hostname
+
+	# Removing openssh-server host keys
+	rm -f "${DIRECTORY}"/etc/ssh/ssh_host_*_key
+	rm -f "${DIRECTORY}"/etc/ssh/ssh_host_*_key.pub
+}
+
+Configure_system ()
+{
+	DIRECTORY="${1}"
+
+	# Overwrite resolv.conf from cache with hosts resolv.conf
+	rm -f "${DIRECTORY}/etc/resolv.conf"
+	cp /etc/resolv.conf "${DIRECTORY}/etc"
+
+	echo "${NAME}" > "${DIRECTORY}/etc/hostname"
+
+	# Configure apt
+	rm -f "${DIRECTORY}/etc/apt/sources.list"
+
+	PARENT_AREA="$(echo ${PARENT_ARCHIVE_AREAS} | sed -e 's|,| |g')"
+	PARENT_DIST="$(echo ${PARENT_DISTRIBUTION} | sed -e 's|-backports||')"
+
+	echo "deb ${PARENT_MIRROR} ${PARENT_DIST} ${PARENT_AREA}" > "${DIRECTORY}/etc/apt/sources.list.d/debian.list"
+
+	for PARENT_REPO in ${PARENT_ARCHIVES}
+	do
+		case "${PARENT_REPO}" in
+			${PARENT_DIST}-security)
+				echo "deb ${PARENT_MIRROR_SECURITY} ${PARENT_DIST}/updates ${PARENT_AREA}" >> "${DIRECTORY}/etc/apt/sources.list.d/debian.list"
+				;;
+
+			${PARENT_DIST}-updates)
+				echo "deb ${PARENT_MIRROR} ${PARENT_DIST}-updates ${PARENT_AREA}" >> "${DIRECTORY}/etc/apt/sources.list.d/debian.list"
+				;;
+
+			${PARENT_DIST}-lts)
+				echo "deb ${PARENT_MIRROR} ${PARENT_DIST}-lts ${PARENT_AREA}" >> "${DIRECTORY}/etc/apt/sources.list.d/debian.list"
+				;;
+
+			${PARENT_DIST}-backports)
+				echo "deb ${PARENT_MIRROR} ${PARENT_DIST}-backports ${PARENT_AREA}" >> "${DIRECTORY}/etc/apt/sources.list.d/debian.list"
+				;;
+
+			${PARENT_DIST}-proposed-updates)
+				echo "deb ${PARENT_MIRROR} ${PARENT_DIST}-proposed-updates ${PARENT_AREA}" >> "${DIRECTORY}/etc/apt/sources.list.d/debian.list"
+				;;
+
+			experimental)
+				echo "deb ${PARENT_MIRROR} experimental ${PARENT_AREA}" >> "${DIRECTORY}/etc/apt/sources.list.d/debian.list"
+				;;
+		esac
+	done
+
+	case "${MODE}" in
+		progress-linux)
+			AREA="$(echo ${ARCHIVE_AREAS} | sed -e 's|,| |g')"
+			DIST="$(echo ${DISTRIBUTION} | sed -e 's|-backports||')"
+
+			echo "deb ${MIRROR} ${DIST} ${AREA}" > "${DIRECTORY}/etc/apt/sources.list.d/progress-linux.list"
+
+			for REPO in ${ARCHIVES}
+			do
+				case "${REPO}" in
+					${DIST}-staging)
+						echo "deb ${MIRROR} ${DIST}-staging ${AREA}" >> "${DIRECTORY}/etc/apt/sources.list.d/progress-linux.list"
+						;;
+
+					${DIST}-security)
+						echo "deb ${MIRROR_SECURITY} ${DIST}-security ${AREA}" >> "${DIRECTORY}/etc/apt/sources.list.d/progress-linux.list"
+						;;
+
+					${DIST}-security-staging)
+						echo "deb ${MIRROR_SECURITY} ${DIST}-security-staging ${AREA}" >> "${DIRECTORY}/etc/apt/sources.list.d/progress-linux.list"
+						;;
+
+					${DIST}-updates)
+						echo "deb ${MIRROR} ${DIST}-updates ${AREA}" >> "${DIRECTORY}/etc/apt/sources.list.d/progress-linux.list"
+						;;
+
+					${DIST}-updates-staging)
+						echo "deb ${MIRROR} ${DIST}-updates-staging ${AREA}" >> "${DIRECTORY}/etc/apt/sources.list.d/progress-linux.list"
+						;;
+
+					${DIST}-lts)
+						echo "deb ${MIRROR} ${DIST}-lts ${AREA}" >> "${DIRECTORY}/etc/apt/sources.list.d/progress-linux.list"
+						;;
+
+					${DIST}-lts-staging)
+						echo "deb ${MIRROR} ${DIST}-lts-staging ${AREA}" >> "${DIRECTORY}/etc/apt/sources.list.d/progress-linux.list"
+						;;
+
+					${DIST}-extras)
+						echo "deb ${MIRROR} ${DIST}-extras ${AREA}" >> "${DIRECTORY}/etc/apt/sources.list.d/progress-linux.list"
+						;;
+
+					${DIST}-extras-staging)
+						echo "deb ${MIRROR} ${DIST}-extras-staging ${AREA}" >> "${DIRECTORY}/etc/apt/sources.list.d/progress-linux.list"
+						;;
+
+					${DIST}-backports)
+						echo "deb ${MIRROR} ${DIST}-backports ${AREA}" >> "${DIRECTORY}/etc/apt/sources.list.d/progress-linux.list"
+						;;
+
+					${DIST}-backports-staging)
+						echo "deb ${MIRROR} ${DIST}-backports-staging ${AREA}" >> "${DIRECTORY}/etc/apt/sources.list.d/progress-linux.list"
+						;;
+
+					${DIST}-backports-extras)
+						echo "deb ${MIRROR} ${DIST}-backports-extras ${AREA}" >> "${DIRECTORY}/etc/apt/sources.list.d/progress-linux.list"
+						;;
+
+					${DIST}-backports-extras-staging)
+						echo "deb ${MIRROR} ${DIST}-backports-extras-staging ${AREA}" >> "${DIRECTORY}/etc/apt/sources.list.d/progress-linux.list"
+						;;
+				esac
+			done
+			;;
+	esac
+
+	if [ "${APT_RECOMMENDS}" = "false" ]
+	then
+
+cat > "${DIRECTORY}/etc/apt/apt.conf.d/recommends.conf" << EOF
+APT::Install-Recommends "false";
+EOF
+
+	fi
+
+	# Add local archives configured from preseed file
+	if ls "${DEBCONF_TMPDIR}/apt"/*.list > /dev/null 2>&1
+	then
+		cp "${DEBCONF_TMPDIR}/apt"/*.list "${DIRECTORY}/etc/apt/sources.list.d"
+
+		if ls "${DEBCONF_TMPDIR}/apt"/*.key > /dev/null 2>&1
+		then
+			for KEY in "${DEBCONF_TMPDIR}/apt"/*.key
+			do
+				cp "${KEY}" "${DIRECTORY}"
+				Chroot "${DIRECTORY}" "apt-key add $(basename ${KEY})"
+				rm -f "${DIRECTORY}/$(basename ${KEY})"
+			done
+		fi
+
+		if ls "${DEBCONF_TMPDIR}/apt"/*.pref > /dev/null 2>&1
+		then
+			cp "${DEBCONF_TMPDIR}/apt"/*.pref "${DIRECTORY}/etc/apt/preferences.d"
+		fi
+	fi
+
+	Upgrade_system "${DIRECTORY}"
+
+	# Preseed system
+	if [ -n "${PRESEED_FILE}" ]
+	then
+		for FILE in ${PRESEED_FILE}
+		do
+			cat "${FILE}" >> "${DIRECTORY}/preseed.cfg"
+		done
+
+		Chroot "${DIRECTORY}" "debconf-set-selections preseed.cfg"
+
+		rm -f "${DIRECTORY}/preseed.cfg"
+	fi
+
+	# FIXME: All packages of priority of essential need to be reconfigured to reflect choices from preseeding
+	# -> fix: use two-stage bootstrap (foreign) and inject preseeds in between
+
+	# Manual hack to workaround broken preseeding in locales package
+	if [ -n "${PRESEED_FILE}" ]
+	then
+		for FILE in ${PRESEED_FILE}
+		do
+			if grep -qs locales "${FILE}"
+			then
+				if [ -e "${DIRECTORY}/var/lib/dpkg/info/locales.list" ]
+				then
+					rm -f "${DIRECTORY}/etc/default/locale" "${DIRECTORY}/etc/locale.gen"
+					Chroot "${DIRECTORY}" "DEBIAN_FRONTEND=noninteractive DEBIAN_PRIORITY=criticial dpkg-reconfigure locales"
+
+					break
+				fi
+			fi
+		done
+	fi
+
+	# Manual hack to create conffiles when using locales-all instead of locales
+	if [ ! -e "${DIRECTORY}/etc/environment" ]
+	then
+		echo "LANG=C.UTF-8" >> "${DIRECTORY}/etc/environment"
+	fi
+
+	if [ ! -e "${DIRECTORY}/etc/default/locale" ]
+	then
+		echo "LANG=C.UTF-8" >> "${DIRECTORY}/etc/default/locale"
+	fi
+
+	# Manual hack to workaround broken preseeding in tzdata package
+	if [ -n "${PRESEED_FILE}" ]
+	then
+		for FILE in ${PRESEED_FILE}
+		do
+			if grep -qs tzdata "${FILE}"
+			then
+				rm -f "${DIRECTORY}/etc/timezone"
+				Chroot "${DIRECTORY}" "DEBIAN_FRONTEND=noninteractive DEBIAN_PRIORITY=criticial dpkg-reconfigure tzdata"
+
+				break
+			fi
+		done
+	fi
+
+	# Temporary hack for base-files (base-files gets upgraded, so run it second time)
+	for FILE in motd.tail motd profile
+	do
+		if [ -e "${DIRECTORY}/usr/share/base-files/${FILE}" ]
+		then
+			rm -f "${DIRECTORY}/etc/${FILE}"
+			cp "${DIRECTORY}/usr/share/base-files/${FILE}" "${DIRECTORY}/etc"
+		fi
+	done
+
+	rm -f "${DIRECTORY}/preseed.cfg"
+
+	# FIXME: Install additional packages after lxc-support has been run.
+	# This is suboptimal, ideally we should install all packages but not run the maintainer scripts,
+	# then run lxc-support, and run the maintainer scripts. This way, lxc-support would see
+	# all the installed packages and could skip those scripts entirely when a certain package is not
+	# installed. Unfortunately, that is not possible in any reasonable way with apt-get.
+	# FTR: The only known workaround for now would be to first apt-get install --download-only all
+	# packages, then unpack them with dpkg, run lxc-support, and dpkg --configure them.
+	# For the time being, it's better to have lxc-support see no packages at all and be run before
+	# packages are installed, than the other way around.
+	# Workaround: We're running lxc-support at the end of the template again.
+	if [ -n "${PACKAGES}" ]
+	then
+		case "${DEBCONF_FRONTEND}" in
+			noninteractive)
+				Chroot "${DIRECTORY}" apt-get --option APT::Force-LoopBreak=true --option Dpkg::Options::="--force-overwrite" --option Dpkg::Options::="--force-confold" --yes install ${PACKAGES}
+				;;
+
+			*)
+				Chroot "${DIRECTORY}" "apt-get --option APT::Force-LoopBreak=true --yes install ${PACKAGES}"
+				;;
+		esac
+	fi
+
+	# Manual hack to regenerate ssh keys
+	if [ -e "${DIRECTORY}/var/lib/dpkg/info/openssh-server.postinst" ] && \
+	   ! ls "${DIRECTORY}"/etc/ssh/ssh_host_*_key > /dev/null 2>&1
+	then
+		Chroot "${DIRECTORY}" "DEBIAN_FRONTEND=noninteractive DEBIAN_PRIORITY=criticial dpkg-reconfigure openssh-server"
+	fi
+
+	# container command
+	if [ -n "${CONTAINER_COMMAND}" ]
+	then
+		echo "${CONTAINER_COMMAND}" > "${DIRECTORY}/.container-command"
+
+		chmod 0755 "sh /.container-command"
+		Chroot "${DIRECTORY}" "sh /.container-command"
+
+		rm -f "${DIRECTORY}/.container-command"
+	fi
+
+}
+
+Configure_network ()
+{
+	# Create /etc/network/interfaces
+
+	DIRECTORY="${1}"
+
+cat > "${DIRECTORY}/etc/network/interfaces.tmp" << EOF
+# Used by ifup(8) and ifdown(8). See the interfaces(5) manpage or
+# /usr/share/doc/ifupdown/examples for more information.
+EOF
+
+	for NUMBER in $(seq 0 ${NETWORK_NUMBER})
+	do
+		eval IPV4_COMMENT="$`echo NETWORK${NUMBER}_IPV4_COMMENT`"
+		eval IPV4_METHOD="$`echo NETWORK${NUMBER}_IPV4_METHOD`"
+		eval IPV4_ADDRESS="$`echo NETWORK${NUMBER}_IPV4_ADDRESS`"
+		eval IPV4_BROADCAST="$`echo NETWORK${NUMBER}_IPV4_BROADCAST`"
+		eval IPV4_GATEWAY="$`echo NETWORK${NUMBER}_IPV4_GATEWAY`"
+		eval IPV4_NETMASK="$`echo NETWORK${NUMBER}_IPV4_NETMASK`"
+		eval IPV4_NETWORK="$`echo NETWORK${NUMBER}_IPV4_NETWORK`"
+		eval IPV4_POST_UP="$`echo NETWORK${NUMBER}_IPV4_POST_UP`"
+		eval IPV4_POST_DOWN="$`echo NETWORK${NUMBER}_IPV4_POST_DOWN`"
+
+		if [ -z "${IPV4_METHOD}" ]
+		then
+			continue
+		fi
+
+		echo >> "${DIRECTORY}/etc/network/interfaces.tmp"
+
+		if [ -n "${IPV4_COMMENT}" ]
+		then
+			echo "# ${IPV4_COMMENT}" >> "${DIRECTORY}/etc/network/interfaces.tmp"
+		fi
+
+		case "${IPV4_METHOD}" in
+			none)
+
+cat >> "${DIRECTORY}/etc/network/interfaces.tmp" << EOF
+iface host${NUMBER} inet manual
+EOF
+
+				;;
+
+			dhcp)
+
+cat >> "${DIRECTORY}/etc/network/interfaces.tmp" << EOF
+auto host${NUMBER}
+iface host${NUMBER} inet dhcp
+EOF
+
+				;;
+
+			static)
+
+cat >> "${DIRECTORY}/etc/network/interfaces.tmp" << EOF
+auto host${NUMBER}
+iface host${NUMBER} inet static
+	address		${IPV4_ADDRESS}
+EOF
+
+				if [ -n "${IPV4_BROADCAST}" ]
+				then
+					echo "	broadcast	${IPV4_BROADCAST}" >> "${DIRECTORY}/etc/network/interfaces.tmp"
+				fi
+
+				if [ -n "${IPV4_GATEWAY}" ]
+				then
+					echo "	gateway		${IPV4_GATEWAY}" >> "${DIRECTORY}/etc/network/interfaces.tmp"
+				fi
+
+				if [ -n "${IPV4_NETMASK}" ]
+				then
+					echo "	netmask		${IPV4_NETMASK}" >> "${DIRECTORY}/etc/network/interfaces.tmp"
+				fi
+
+				if [ -n "${IPV4_NETWORK}" ]
+				then
+					echo "	network		${IPV4_NETWORK}" >> "${DIRECTORY}/etc/network/interfaces.tmp"
+				fi
+
+				if [ -n "${IPV4_POST_UP}" ]
+				then
+					echo "	post-up		${IPV4_POST_UP}" >> "${DIRECTORY}/etc/network/interfaces.tmp"
+				fi
+
+				if [ -n "${IPV4_POST_DOWN}" ]
+				then
+					echo "	post-down	${IPV4_POST_DOWN}" >> "${DIRECTORY}/etc/network/interfaces.tmp"
+				fi
+				;;
+		esac
+
+		NUMBER="$((${NUMBER} + 1))"
+	done
+
+	mv "${DIRECTORY}/etc/network/interfaces.tmp" "${DIRECTORY}/etc/network/interfaces"
+
+	# create /etc/resolv.conf
+	rm -f "${DIRECTORY}/etc/resolv.conf.tmp"
+
+	if [ -n "${NAMESERVER_DOMAIN}" ]
+	then
+		echo "domain ${NAMESERVER_DOMAIN}" >> "${DIRECTORY}/etc/resolv.conf.tmp"
+	fi
+
+	if [ -n "${NAMESERVER_SEARCH}" ]
+	then
+		echo "search ${NAMESERVER_SEARCH}" >> "${DIRECTORY}/etc/resolv.conf.tmp"
+	fi
+
+	if [ -n "${NAMESERVER_SERVER}" ]
+	then
+		if [ -e "${DIRECTORY}/etc/resolv.conf.tmp" ]
+		then
+			echo "" >> "${DIRECTORY}/etc/resolv.conf.tmp"
+		fi
+
+		for NAMESERVER in $(echo ${NAMESERVER_SERVER} | sed -e 's|,| |g')
+		do
+			echo "nameserver ${NAMESERVER}" >> "${DIRECTORY}/etc/resolv.conf.tmp"
+		done
+	fi
+
+	if [ -n "${NAMESERVER_OPTIONS}" ]
+	then
+		if [ -e "${DIRECTORY}/etc/resolv.conf.tmp" ]
+		then
+			echo "" >> "${DIRECTORY}/etc/resolv.conf.tmp"
+		fi
+
+		echo "options ${NAMESERVER_OPTIONS}" >> "${DIRECTORY}/etc/resolv.conf.tmp"
+	fi
+
+	if [ -e "${DIRECTORY}/etc/resolv.conf.tmp" ]
+	then
+		mv "${DIRECTORY}/etc/resolv.conf.tmp" "${DIRECTORY}/etc/resolv.conf"
+	fi
+
+	# Create /etc/hosts
+	case "${NETWORK0_IPV4_METHOD}" in
+		none|dhcp)
+
+cat > "${DIRECTORY}/etc/hosts.tmp" << EOF
+127.0.0.1	localhost	${NAME}
+
+# The following lines are desirable for IPv6 capable hosts
+::1	ip6-localhost ip6-loopback
+fe00::0	ip6-localnet
+ff00::0	ip6-mcastprefix
+ff02::1	ip6-allnodes
+ff02::2	ip6-allrouters
+EOF
+
+			;;
+
+		static)
+
+cat > "${DIRECTORY}/etc/hosts.tmp" << EOF
+127.0.0.1	localhost
+${NETWORK0_IPV4_ADDRESS}	${NAME}
+
+# The following lines are desirable for IPv6 capable hosts
+::1	ip6-localhost ip6-loopback
+fe00::0	ip6-localnet
+ff00::0	ip6-mcastprefix
+ff02::1	ip6-allnodes
+ff02::2	ip6-allrouters
+EOF
+
+			;;
+	esac
+
+	mv "${DIRECTORY}/etc/hosts.tmp" "${DIRECTORY}/etc/hosts"
+}
+
+Commands ()
+{
+	DIRECTORY="${1}"
+
+	if [ -n "${HOST_COMMAND}" ]
+	then
+		echo "${HOST_COMMAND}" > "${DIRECTORY}/.host-command"
+
+		cd "${DIRECTORY}"
+		sh "${DIRECTORY}/.host-command"
+		cd "${OLDPWD}"
+
+		rm -f "${DIRECTORY}/.host-command"
+	fi
+
+	# config (FIXME)
+	sed -i -e "s|^network-bridge=.*|network-bridge=${NETWORK0_BRIDGE}|" "${CONFIG}/${NAME}.conf"
+
+	# Setting root password
+	echo root:${ROOT_PASSWORD} | chroot "${DIRECTORY}" chpasswd
+
+	case "${ROOT_RANDOM_PASSWORD}" in
+		true)
+			echo "${NAME}: root password set to '${ROOT_PASSWORD}'."
+			;;
+	esac
+}
+
+umask 0022
+
+# Get distributor from template filename
+MODE="$(basename ${SCRIPT})"
+
+case "${MODE}" in
+	debconf)
+		MODE="debian"
+		;;
+esac
+
+export MODE
+
+CACHE="/var/cache/container-tools/${MODE}"
+SYSTEM="${MACHINES}/${NAME}"
+
+Debconf
+
+# Run debconf parts
+for SCRIPT in /usr/share/container-tools/scripts/debconf.d/*
+do
+	if [ -x "${SCRIPT}" ]
+	then
+		# FIXME
+		# debconf -ocontainer-tools "${SCRIPT}"
+		"${SCRIPT}"
+	fi
+done
+
+# Read-in configuration from debconf
+. "${DEBCONF_TMPDIR}/debconf.default"
+
+## Generic parts
+if [ ! -e "${CACHE}/${DISTRIBUTION}_${ARCHITECTURE}" ]
+then
+	Debootstrap "${CACHE}/${DISTRIBUTION}_${ARCHITECTURE}.tmp"
+	Configure_apt "${CACHE}/${DISTRIBUTION}_${ARCHITECTURE}.tmp"
+	Deconfigure_system "${CACHE}/${DISTRIBUTION}_${ARCHITECTURE}.tmp"
+
+	mv "${CACHE}/${DISTRIBUTION}_${ARCHITECTURE}.tmp" "${CACHE}/${DISTRIBUTION}_${ARCHITECTURE}"
+fi
+
+Upgrade_system "${CACHE}/${DISTRIBUTION}_${ARCHITECTURE}" || echo "W: If upgrading the system failed, try removing the cache for your distribution in /var/cache/container-tools"
+Cleanup_system "${CACHE}/${DISTRIBUTION}_${ARCHITECTURE}"
+
+## Specific parts
+cp -a "${CACHE}/${DISTRIBUTION}_${ARCHITECTURE}" "${MACHINES}/${NAME}"
+
+Configure_system "${MACHINES}/${NAME}"
+Configure_network "${MACHINES}/${NAME}"
+Cleanup_system "${MACHINES}/${NAME}"
+
+Commands "${MACHINES}/${NAME}"
+
+# remove debconf temporary files
+#FIXME
+#echo rm --preserve-root --one-file-system -rf "${DEBCONF_TMPDIR}"
+rmdir --ignore-fail-on-non-empty /tmp/container-tools || true
diff --git a/share/scripts/debconf.d/0001-preseed-file b/share/scripts/debconf.d/0001-preseed-file
new file mode 100755
index 0000000..51758b5
--- /dev/null
+++ b/share/scripts/debconf.d/0001-preseed-file
@@ -0,0 +1,83 @@
+#!/bin/sh
+
+# Open Infrastructure: container-tools
+# Copyright (C) 2014-2016 Daniel Baumann <daniel.baumann@open-infrastructure.net>
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+set -e
+
+CONFIG="/etc/container-tools/debconf"
+
+DEBCONF_NOWARNINGS="true"
+export DEBCONF_NOWARNINGS
+
+. /usr/share/debconf/confmodule
+
+if [ -n "${PRESEED_FILE}" ]
+then
+	# user specified one or more preseed files through commandline option
+	db_set cnt-debconf/preseed-file "${PRESEED_FILE}"
+	db_fset cnt-debconf/preseed-file seen true
+elif ls "${CONFIG}"/* > /dev/null 2>&1
+then
+	# user has not specified preseed files through commandline option,
+	# showing debconf selection dialog for global preseed file.
+
+	FILES="$(cd ${CONFIG} && find * -not -type d -and -not -name '*.cfg' -and -not -name '*.in' -and -not -name '*.sh')"
+	PRESEED_FILES="$(for FILE in ${FILES}; do echo -n "${FILE}, "; done | sed -e 's|, $||')"
+
+	if [ -n "${PRESEED_FILES}" ]
+	then
+		db_subst cnt-debconf/preseed-files CHOICES "none, custom, , ${PRESEED_FILES}"
+
+		db_settitle cnt-debconf/title
+		db_input high cnt-debconf/preseed-files || true
+		db_go
+
+		db_get cnt-debconf/preseed-files
+		PRESEED_FILE="${RET}" # select
+
+		case "${PRESEED_FILE}" in
+			none|custom)
+				;;
+
+			*)
+				# user specified preseed file through debconf select
+				db_set cnt-debconf/preseed-file "${CONFIG}/${PRESEED_FILE}"
+				db_fset cnt-debconf/preseed-file seen true
+				;;
+		esac
+	fi
+fi
+
+case "${PRESEED_FILE}" in
+	none)
+		;;
+
+	*)
+		# ask user for a preseed file
+		db_settitle cnt-debconf/title
+		db_input high cnt-debconf/preseed-file || true
+		db_go
+
+		db_get cnt-debconf/preseed-file
+		PRESEED_FILE="${RET}" # string (w/ empty)
+
+		echo "PRESEED_FILE=\"${PRESEED_FILE}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+		export PRESEED_FILE
+		;;
+esac
+
+db_stop
diff --git a/share/scripts/debconf.d/0001-preseed-file.templates b/share/scripts/debconf.d/0001-preseed-file.templates
new file mode 100644
index 0000000..aa9afa2
--- /dev/null
+++ b/share/scripts/debconf.d/0001-preseed-file.templates
@@ -0,0 +1,17 @@
+Template: cnt-debconf/title
+Type: title
+Description: Open Infrastructure: container-tools
+
+Template: cnt-debconf/preseed-files
+Type: select
+Default: none
+Choices: ${CHOICES}
+Description: Choose a preseed config, enter a custom one, or use no preseed file at all.
+
+Template: cnt-debconf/preseed-file
+Type: string
+Default:
+Description: Enter (optional) preseed file to use:
+ Preseed file anyone?
+ .
+ If you do not want to use a preseed file, leave this question empty.
diff --git a/share/scripts/debconf.d/0002-preseed-debconf b/share/scripts/debconf.d/0002-preseed-debconf
new file mode 100755
index 0000000..3978b8f
--- /dev/null
+++ b/share/scripts/debconf.d/0002-preseed-debconf
@@ -0,0 +1,80 @@
+#!/bin/sh
+
+# Open Infrastructure: container-tools
+# Copyright (C) 2014-2016 Daniel Baumann <daniel.baumann@open-infrastructure.net>
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+set -e
+
+if [ -e "${DEBCONF_TMPDIR}/debconf.default" ]
+then
+	. "${DEBCONF_TMPDIR}/debconf.default"
+fi
+
+if [ -z "${PRESEED_FILE}" ]
+then
+	# user has not specified or selected any preseed files
+	exit 0
+fi
+
+# user has one or more preseed file specified through commandline option
+# or debconf selection dialog.
+PRESEED_FILES="$(echo ${PRESEED_FILE} | sed -e 's|,| |g')"
+
+DEBCONF_PRESEED_FILES=""
+
+for PRESEED_FILE in ${PRESEED_FILES}
+do
+	if [ ! -e "${PRESEED_FILE}" ]
+	then
+		# preseed file does not exist
+		echo "W: ${PRESEED_FILE}: No such file."
+
+		continue
+	fi
+
+	# add preseed file to debconf
+	DEBCONF_PRESEED_FILES="${DEBCONF_PRESEED_FILES} ${PRESEED_FILE}"
+
+	if ! grep -qs '^ *container-tools *cnt-debconf/include-preseed-files' "${PRESEED_FILE}"
+	then
+		# preseed file has no includes
+		continue
+	fi
+
+	# preseed file has includes
+	INCLUDE_PRESEED_FILES="$(grep '^ *container-tools *cnt-debconf/include-preseed-files' ${PRESEED_FILE} | awk '{ $1=$2=$3=""; print $0 }' | sed -e 's|,| |g')"
+
+	# FIXME: we're supporting only *ONE* include layer for now, so no nested/recursive includes just yet
+	for FILE in ${INCLUDE_PRESEED_FILES}
+	do
+		if [ -e "${FILE}" ]
+		then
+			DEBCONF_PRESEED_FILES="${FILE} ${DEBCONF_PRESEED_FILES}"
+		else
+			# included preseed file does not exist
+			echo "W: ${INCLUDE_PRESEED_FILE}: No such file - included from ${PRESEED_FILE}"
+		fi
+	done
+done
+
+for DEBCONF_PRESEED_FILE in ${DEBCONF_PRESEED_FILES}
+do
+	# Apply user specified preseed files
+	debconf-set-selections "${DEBCONF_PRESEED_FILE}"
+done
+
+# Write expanded list of debconf preseed files
+echo "PRESEED_FILE=\"${DEBCONF_PRESEED_FILES}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
diff --git a/share/scripts/debconf.d/0003-debconf b/share/scripts/debconf.d/0003-debconf
new file mode 100755
index 0000000..9bd15d0
--- /dev/null
+++ b/share/scripts/debconf.d/0003-debconf
@@ -0,0 +1,1050 @@
+#!/bin/sh
+
+# Open Infrastructure: container-tools
+# Copyright (C) 2014-2016 Daniel Baumann <daniel.baumann@open-infrastructure.net>
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+set -e
+
+DEBCONF_NOWARNINGS="true"
+export DEBCONF_NOWARNINGS
+
+. /usr/share/debconf/confmodule
+
+Distribution ()
+{
+	db_get cnt-debconf/distribution
+	DISTRIBUTION="${RET}" # select
+
+	if [ -z "${DISTRIBUTION}" ]
+	then
+		case "${MODE}" in
+			debian)
+				db_subst cnt-debconf/distribution CHOICES "Debian GNU/Linux 8 \"jessie\", Debian GNU/Linux 9 \"stretch\", Debian GNU/Linux unstable/sid"
+				db_subst cnt-debconf/distribution CHOICES_C "jessie, stretch, sid"
+
+				db_set cnt-debconf/distribution jessie
+				db_fset cnt-debconf/distribution seen false
+				;;
+
+			progress-linux)
+				db_subst cnt-debconf/distribution CHOICES "Progress Linux 3 (cairon), Progress Linux 3+ (cairon-backports)"
+				db_subst cnt-debconf/distribution CHOICES_C "cairon, cairon-backports"
+
+				db_set cnt-debconf/distribution cairon-backports
+				db_fset cnt-debconf/distribution seen false
+				;;
+		esac
+
+		db_settitle cnt-debconf/title
+		db_input high cnt-debconf/distribution || true
+		db_go
+
+		db_get cnt-debconf/distribution
+		DISTRIBUTION="${RET}" # select
+	fi
+
+	echo "DISTRIBUTION=\"${DISTRIBUTION}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+	export DISTRIBUTION
+}
+
+Parent_distribution ()
+{
+	db_get cnt-debconf/parent-distribution
+	PARENT_DISTRIBUTION="${RET}"
+
+	if [ -z "${PARENT_DISTRIBUTION}" ]
+	then
+		case "${MODE}" in
+			progress-linux)
+				case "${DISTRIBUTION}" in
+					cairon*)
+						PARENT_DISTRIBUTION="jessie"
+						;;
+				esac
+				;;
+
+			*)
+				PARENT_DISTRIBUTION="${DISTRIBUTION}"
+				;;
+		esac
+	fi
+
+	echo "PARENT_DISTRIBUTION=\"${PARENT_DISTRIBUTION}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+	export PARENT_DISTRIBUTION
+}
+
+Architecture ()
+{
+	case "$(dpkg --print-architecture)" in
+		amd64)
+			DEFAULT="amd64"
+			CHOICES="Automatic, 32-bit PC (i386), 64-bit PC (amd64)"
+			CHOICES_C="auto, i386, amd64"
+			;;
+
+		arm64)
+			DEFAULT="arm64"
+			CHOICES="Automatic, Rpi1 (armel), Rpi2 (armhf), Rpi3 (arm64)"
+			CHOICES_C="auto, armel, armhf, arm64"
+			;;
+
+		armel)
+			DEFAULT="armel"
+			CHOICES="Automatic, Rpi1 (armel)"
+			CHOICES_C="auto, armel"
+			;;
+
+		armhf)
+			DEFAULT="armhf"
+			CHOICES="Automatic, Rpi1 (armel), Rpi2 (armhf)"
+			CHOICES_C="auto, armel, armhf"
+			;;
+
+		i386)
+			case "$(uname -m)" in
+				x86_64)
+					DEFAULT="amd64"
+					CHOICES="Automatic, 32-bit PC (i386), 64-bit PC (amd64)"
+					CHOICES_C="auto, i386, amd64"
+					;;
+
+				*)
+					DEFAULT="i386"
+					CHOICES=""
+					CHOICES_C=""
+					;;
+			esac
+			;;
+
+		*)
+			echo "E: Architecture current not yet supported."
+			exit 1
+	esac
+
+	db_get cnt-debconf/architecture
+	ARCHITECTURE="${RET}" # select
+
+	if [ -z "${ARCHITECTURE}" ] && [ -n "${CHOICES}" ]
+	then
+		db_subst cnt-debconf/architecture CHOICES ${CHOICES}
+		db_subst cnt-debconf/architecture CHOICES_C ${CHOICES_C}
+
+		db_set cnt-debconf/architecture ${DEFAULT}
+		db_fset cnt-debconf/distribution seen false
+
+		db_settitle cnt-debconf/title
+		db_input high cnt-debconf/architecture || true
+		db_go
+
+		db_get cnt-debconf/architecture
+		ARCHITECTURE="${RET}" # select
+	fi
+
+	case "${ARCHITECTURE}" in
+		auto)
+			ARCHITECTURE="${DEFAULT}"
+			;;
+	esac
+
+	echo "ARCHITECTURE=\"${ARCHITECTURE}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+	export ARCHITECTURE
+}
+
+Archives ()
+{
+	db_get cnt-debconf/archives
+	ARCHIVES="${RET}" # multiselect
+
+	if [ -z "${ARCHIVES}" ]
+	then
+		case "${MODE}" in
+			debian)
+				case "${PARENT_DISTRIBUTION}" in
+					sid)
+						db_subst cnt-debconf/archives CHOICES "Experimental"
+						db_subst cnt-debconf/archives CHOICES_C "experimental"
+
+						db_set cnt-debconf/archives ""
+						db_fset cnt-debconf/archives seen false
+						;;
+
+					*)
+						db_subst cnt-debconf/archives CHOICES "Security, Updates, LTS, Backports, Proposed Updates"
+						db_subst cnt-debconf/archives CHOICES_C "${DISTRIBUTION}-security, ${DISTRIBUTION}-updates, ${DISTRIBUTION}-lts, ${DISTRIBUTION}-backports, ${DISTRIBUTION}-proposed-updates"
+
+						case "${PARENT_DISTRIBUTION}" in
+							sid)
+								db_set cnt-debconf/archives ""
+								;;
+
+							*)
+								#db_set cnt-debconf/archives "${DISTRIBUTION}-security, ${DISTRIBUTION}-updates, ${DISTRIBUTION}-lts, ${DISTRIBUTION}-backports"
+								db_set cnt-debconf/archives "${DISTRIBUTION}-security, ${DISTRIBUTION}-updates"
+								;;
+						esac
+
+						db_fset cnt-debconf/archives seen false
+						;;
+				esac
+				;;
+
+			progress-linux)
+				DIST="$(echo ${DISTRIBUTION} | sed -e 's|-backports||')"
+
+				db_subst cnt-debconf/archives CHOICES "staging, Security, Security (staging), Updates, Updates (staging), LTS, LTS (staging), Extras, Extras (staging), Backports, Backports (staging), Backports Extras, Backports Extras (staging)"
+				db_subst cnt-debconf/archives CHOICES_C "${DIST}-staging, ${DIST}-security, ${DIST}-security-staging, ${DIST}-updates, ${DIST}-updates-staging, ${DIST}-lts, ${DIST}-lts-staging, ${DIST}-extras, ${DIST}-extras-staging, ${DIST}-backports, ${DIST}-backports-staging, ${DIST}-backports-extras, ${DIST}-backports-extras-staging"
+
+				db_set cnt-debconf/archives "${DIST}-security, ${DIST}-updates, ${DIST}-lts, ${DIST}-extras, ${DIST}-backports, ${DIST}-backports-extras"
+				db_fset cnt-debconf/archives seen false
+				;;
+		esac
+
+		db_settitle cnt-debconf/title
+		db_input high cnt-debconf/archives || true
+		db_go
+
+		db_get cnt-debconf/archives
+		ARCHIVES="${RET}" # multiselect
+	fi
+
+	ARCHIVES="$(echo ${ARCHIVES} | sed -e 's|, | |g')"
+
+	echo "ARCHIVES=\"${ARCHIVES}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+	export ARCHIVES
+}
+
+Parent_archives ()
+{
+	db_get cnt-debconf/parent-archives
+	PARENT_ARCHIVES="${RET}" # multiselect (w/o empty)
+
+	if [ -z "${PARENT_ARCHIVES}" ]
+	then
+		case "${MODE}" in
+			progress-linux)
+				db_subst cnt-debconf/parent-archives CHOICES "Security, Updates, LTS, Backports, Proposed Updates"
+				db_subst cnt-debconf/parent-archives CHOICES_C "${PARENT_DISTRIBUTION}-security, ${PARENT_DISTRIBUTION}-updates, ${PARENT_DISTRIBUTION}-lts, ${PARENT_DISTRIBUTION}-backports, ${PARENT_DISTRIBUTION}-proposed-updates"
+
+				case "${PARENT_DISTRIBUTION}" in
+					*)
+						#db_set cnt-debconf/parent-archives "${PARENT_DISTRIBUTION}-security, ${PARENT_DISTRIBUTION}-lts, ${PARENT_DISTRIBUTION}-updates, ${PARENT_DISTRIBUTION}-backports"
+						db_set cnt-debconf/parent-archives "${PARENT_DISTRIBUTION}-security, ${PARENT_DISTRIBUTION}-updates"
+						;;
+				esac
+
+				db_fset cnt-debconf/parent-archives seen false
+
+				db_settitle cnt-debconf/title
+				db_input high cnt-debconf/parent-archives || true
+				db_go
+				;;
+
+			*)
+				db_subst cnt-debconf/parent-archives CHOICES "Security, Updates, LTS, Backports, Proposed Updates"
+				db_subst cnt-debconf/parent-archives CHOICES_C "${ARCHIVES}"
+
+				db_set cnt-debconf/parent-archives "${ARCHIVES}"
+				db_fset cnt-debconf/parent-archives seen true
+				;;
+		esac
+
+		db_get cnt-debconf/parent-archives
+		PARENT_ARCHIVES="${RET}" # multiselect (w/o empty)
+
+		if [ -z "${PARENT_ARCHIVES}" ]
+		then
+			case "${MODE}" in
+				progress-linux)
+					case "${PARENT_DISTRIBUTION}" in
+						*)
+							#PARENT_ARCHIVES="${PARENT_DISTRIBUTION}-security, ${PARENT_DISTRIBUTION}-updates, ${PARENT_DISTRIBUTION}-lts, ${PARENT_DISTRIBUTION}-backports"
+							PARENT_ARCHIVES="${PARENT_DISTRIBUTION}-security, ${PARENT_DISTRIBUTION}-updates"
+							;;
+					esac
+					;;
+
+				*)
+					PARENT_ARCHIVES="${ARCHIVES}"
+					;;
+			esac
+		fi
+	fi
+
+	PARENT_ARCHIVES="$(echo ${PARENT_ARCHIVES} | sed -e 's|, | |g')"
+
+	echo "PARENT_ARCHIVES=\"${PARENT_ARCHIVES}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+	export PARENT_ARCHIVES
+}
+
+Mirror ()
+{
+	db_get cnt-debconf/mirror
+	MIRROR="${RET}"
+
+	if [ -z "${MIRROR}" ]
+	then
+		case "${MODE}" in
+			debian)
+				db_set cnt-debconf/mirror http://httpredir.debian.org/debian
+				db_fset cnt-debconf/mirror seen false
+				;;
+
+			progress-linux)
+				db_set cnt-debconf/mirror http://cdn.archive.progress-linux.org/packages
+				db_fset cnt-debconf/mirror seen false
+				;;
+		esac
+
+		db_settitle cnt-debconf/title
+		db_input high cnt-debconf/mirror || true
+		db_go
+
+		db_get cnt-debconf/mirror
+		MIRROR="${RET}" # string (w/o empty)
+
+		if [ -z "${MIRROR}" ]
+		then
+			case "${MODE}" in
+				debian)
+					MIRROR="http://httpredir.debian.org/debian"
+					;;
+
+				progress-linux)
+					MIRROR="http://cdn.archive.progress-linux.org/packages"
+					;;
+			esac
+		fi
+	fi
+
+	echo "MIRROR=\"${MIRROR}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+	export MIRROR
+}
+
+Mirror_security ()
+{
+	if ! echo "${ARCHIVES}" | grep -qs "-security"
+	then
+		return 0
+	fi
+
+	db_get cnt-debconf/mirror-security
+	MIRROR_SECURITY="${RET}" # string (w/o empty)
+
+	if [ -z "${MIRROR_SECURITY}" ]
+	then
+		case "${MODE}" in
+			debian)
+				db_set cnt-debconf/mirror-security http://security.debian.org
+				db_fset cnt-debconf/mirror-security seen false
+				;;
+
+			*)
+				db_set cnt-debconf/mirror-security ${MIRROR}
+				db_fset cnt-debconf/mirror-security seen true
+				;;
+		esac
+
+		db_settitle cnt-debconf/title
+		db_input high cnt-debconf/mirror-security || true
+		db_go
+
+		db_get cnt-debconf/mirror-security
+		MIRROR_SECURITY="${RET}" # string (w/o empty)
+
+		if [ -z "${MIRROR_SECURITY}" ]
+		then
+			case "${MODE}" in
+				debian)
+					MIRROR_SECURITY="http://security.debian.org"
+					;;
+
+				*)
+					MIRROR_SECURITY="${MIRROR}"
+					;;
+			esac
+		fi
+	fi
+
+	echo "MIRROR_SECURITY=\"${MIRROR_SECURITY}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+	export MIRROR_SECURITY
+}
+
+Parent_mirror ()
+{
+	db_get cnt-debconf/parent-mirror
+	PARENT_MIRROR="${RET}" # string (w/o empty)
+
+	if [ -z "${PARENT_MIRROR}" ]
+	then
+		case "${MODE}" in
+			progress-linux)
+				db_set cnt-debconf/parent-mirror http://httpredir.debian.org/debian
+				db_fset cnt-debconf/parent-mirror seen false
+
+				db_settitle cnt-debconf/title
+				db_input high cnt-debconf/parent-mirror || true
+				db_go
+				;;
+
+			*)
+				db_set cnt-debconf/parent-mirror ${MIRROR}
+				db_fset cnt-debconf/parent-mirror seen true
+				;;
+		esac
+
+		db_get cnt-debconf/parent-mirror
+		PARENT_MIRROR="${RET}" # string (w/o empty)
+
+		if [ -z "${PARENT_MIRROR}" ]
+		then
+			case "${MODE}" in
+				progress-linux)
+					PARENT_MIRROR="http://httpredir.debian.org/debian"
+					;;
+
+				*)
+					PARENT_MIRROR="${MIRROR}"
+					;;
+			esac
+		fi
+	fi
+
+	echo "PARENT_MIRROR=\"${PARENT_MIRROR}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+	export PARENT_MIRROR
+}
+
+Parent_mirror_security ()
+{
+	if ! echo "${PARENT_ARCHIVES}" | grep -qs "-security"
+	then
+		return 0
+	fi
+
+	db_get cnt-debconf/parent-mirror-security
+	PARENT_MIRROR_SECURITY="${RET}" # string (w/o empty)
+
+	if [ -z "${PARENT_MIRROR_SECURITY}" ]
+	then
+		case "${MODE}" in
+			progress-linux)
+				db_set cnt-debconf/parent-mirror-security http://security.debian.org
+				db_fset cnt-debconf/parent-mirror-security seen false
+
+				db_settitle cnt-debconf/title
+				db_input high cnt-debconf/parent-mirror-security || true
+				db_go
+				;;
+
+			*)
+				db_set cnt-debconf/parent-mirror-security ${MIRROR_SECURITY}
+				db_fset cnt-debconf/parent-mirror-security seen true
+				;;
+		esac
+
+		db_get cnt-debconf/parent-mirror-security
+		PARENT_MIRROR_SECURITY="${RET}" # string (w/o empty)
+
+		if [ -z "${PARENT_MIRROR_SECURITY}" ]
+		then
+			case "${MODE}" in
+				progress-linux)
+					PARENT_MIRROR_SECURITY="http://security.debian.org"
+					;;
+
+				*)
+					PARENT_MIRROR_SECURITY="${MIRROR_SECURITY}"
+					;;
+			esac
+		fi
+	fi
+
+	echo "PARENT_MIRROR_SECURITY=\"${PARENT_MIRROR_SECURITY}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+	export PARENT_MIRROR_SECURITY
+}
+
+Archive_areas ()
+{
+	db_get cnt-debconf/archive-areas
+	ARCHIVE_AREAS="${RET}"
+
+	if [ -z "${ARCHIVE_AREAS}" ]
+	then
+		case "${MODE}" in
+			progress-linux)
+				db_subst cnt-debconf/archive-areas CHOICES "main, contrib, non-free"
+
+				db_set cnt-debconf/archive-areas "main, contrib, non-free"
+				db_fset cnt-debconf/archive-areas seen false
+				;;
+
+			*)
+				db_subst cnt-debconf/archive-areas CHOICES "main, contrib, non-free"
+
+				db_set cnt-debconf/archive-areas "main"
+				db_fset cnt-debconf/archive-areas seen false
+				;;
+		esac
+
+		db_settitle cnt-debconf/title
+		db_input high cnt-debconf/archive-areas || true
+		db_go
+
+		db_get cnt-debconf/archive-areas
+		ARCHIVE_AREAS="${RET}" # multiselect (w/o empty)
+
+		if [ -z "${ARCHIVE_AREAS}" ]
+		then
+			case "${MODE}" in
+				debian)
+					ARCHIVE_AREAS="main"
+					;;
+
+				progress-linux)
+					ARCHIVE_AREAS="main, contrib, non-free"
+					;;
+			esac
+		fi
+	fi
+
+	ARCHIVE_AREAS="$(echo ${ARCHIVE_AREAS} | sed -e 's| ||g')"
+
+	echo "ARCHIVE_AREAS=\"${ARCHIVE_AREAS}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+	export ARCHIVE_AREAS
+}
+
+Parent_archive_areas ()
+{
+	db_get cnt-debconf/parent-archive-areas
+	PARENT_ARCHIVE_AREAS="${RET}" # multiselect (w/o empty)
+
+	if [ -z "${PARENT_ARCHIVE_AREAS}" ]
+	then
+		case "${MODE}" in
+			progress-linux)
+				db_subst cnt-debconf/parent-archive-areas CHOICES "main, contrib, non-free"
+
+				db_set cnt-debconf/parent-archive-areas "main, contrib, non-free"
+				db_fset cnt-debconf/parent-archive-areas seen false
+
+				db_settitle cnt-debconf/title
+				db_input high cnt-debconf/parent-archive-areas || true
+				db_go
+				;;
+
+			*)
+				db_subst cnt-debconf/parent-archive-areas CHOICES "${ARCHIVE_AREAS}"
+
+				db_set cnt-debconf/parent-archive-areas "${ARCHIVE_AREAS}"
+				db_fset cnt-debconf/parent-archive-areas seen true
+				;;
+		esac
+
+		db_get cnt-debconf/parent-archive-areas
+		PARENT_ARCHIVE_AREAS="${RET}" # multiselect (w/o empty)
+
+		if [ -z "${PARENT_ARCHIVE_AREAS}" ]
+		then
+			case "${MODE}" in
+				progress-linux)
+					PARENT_ARCHIVE_AREAS="main, contrib, non-free"
+					;;
+
+				*)
+					PARENT_ARCHIVE_AREAS="${ARCHIVE_AREAS}"
+					;;
+			esac
+		fi
+	fi
+
+	PARENT_ARCHIVE_AREAS="$(echo ${PARENT_ARCHIVE_AREAS} | sed -e 's| ||g')"
+
+	echo "PARENT_ARCHIVE_AREAS=\"${PARENT_ARCHIVE_AREAS}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+	export PARENT_ARCHIVE_AREAS
+}
+
+Packages ()
+{
+	db_get cnt-debconf/packages
+	PACKAGES="${RET}" # string (w/ empty)
+
+	if [ -z "${PACKAGES}" ]
+	then
+		db_settitle cnt-debconf/title
+		db_input high cnt-debconf/packages || true
+		db_go
+
+		db_get cnt-debconf/packages
+		PACKAGES="${RET}" # string (w/ empty)
+	fi
+
+	echo "PACKAGES=\"${PACKAGES}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+	export PACKAGES
+}
+
+Local_archives ()
+{
+	NUMBER="0"
+
+	while db_get cnt-debconf/archive${NUMBER}/repository && [ "${RET}" ]
+	do
+		mkdir -p "${DEBCONF_TMPDIR}/apt"
+
+		REPOSITORY="${RET#deb }"
+
+		LIST="archive${NUMBER}.list"
+		if db_get cnt-debconf/archive${NUMBER}/list
+		then
+			LIST="$(basename ${RET} .list).list"
+		fi
+
+		COMMENT=""
+		if db_get cnt-debconf/archive${NUMBER}/comment
+		then
+			COMMENT="${RET}"
+
+			echo "# ${COMMENT}" > "${DEBCONF_TMPDIR}/apt/${LIST}"
+		fi
+
+		echo "deb ${REPOSITORY}" >> "${DEBCONF_TMPDIR}/apt/${LIST}"
+
+		if db_get cnt-debconf/archive${NUMBER}/source && [ "$RET" = true ]
+		then
+			echo "deb-src ${REPOSITORY}" >> "${DEBCONF_TMPDIR}/apt/${LIST}"
+		fi
+
+		KEY=""
+		if db_get cnt-debconf/archive${NUMBER}/key
+		then
+			KEY="${RET}"
+
+			wget -q "${KEY}" -O "${DEBCONF_TMPDIR}/apt/$(basename ${LIST} .list).key"
+		fi
+
+		PREFERENCES_PACKAGE=""
+		PREFERENCES_PIN=""
+		PREFERENCES_PIN_PRIORITY=""
+		if db_get cnt-debconf/archive${NUMBER}/preferences-package
+		then
+			PREFERENCES_PACKAGE="${RET}"
+
+			if db_get cnt-debconf/archive${NUMBER}/preferences-pin
+			then
+				PREFERENCES_PIN="${RET}"
+			fi
+
+			if db_get cnt-debconf/archive${NUMBER}/preferences-pin-priority
+			then
+				PREFERENCES_PIN_PRIORITY="${RET}"
+			fi
+
+			if [ -n "${PREFERENCES_PACKAGE}" ] || [ -n "${PREFERENCES_PIN}" ] || [ -n "${PREFERENCES_PIN_PRIORITY}" ]
+			then
+
+cat > "${DEBCONF_TMPDIR}/apt/$(basename ${LIST} .list).pref" << EOF
+Package: ${PREFERENCES_PACKAGE}
+Pin: ${PREFERENCES_PIN}
+Pin-Priority: ${PREFERENCES_PIN_PRIORITY}
+EOF
+
+			fi
+		fi
+
+		NUMBER="$((${NUMBER} + 1))"
+	done
+}
+
+Network_defaults ()
+{
+	# FIXME:
+	#   * use interfaces.d where possible
+	#   * respect pre-existing interfaces (or interfaces.d)
+	#   * add support for bridges (make interface configuration more generic?)
+
+	NETWORK0_BRIDGE="${NETWORK0_BRIDGE:-br0}"
+	NETWORK0_IPV4_METHOD="${NETWORK0_IPV4_METHOD:-dhcp}"
+	NETWORK0_IPV4_ADDRESS="${NETWORK0_IPV4_ADDRESS:-192.168.1.2}"
+	NETWORK0_IPV4_NETMASK="${NETWORK0_IPV4_NETMASK:-255.255.255.0}"
+
+	if [ "${NETWORK0_IPV4_METHOD}" = "static" ] && [ -e /etc/resolv.conf ]
+	then
+		NAMESERVER_SERVER="${NAMESERVER_SERVER:-$(if [ -e /etc/resolv.conf ]; then awk '/^nameserver / {$1=""; print $0}' /etc/resolv.conf; fi)}"
+		# Workaround to get rid of newlines since debconf can not handle multiline return value in assignments
+		NAMESERVER_SERVER="$(echo ${NAMESERVER_SERVER})"
+
+		NAMESERVER_DOMAIN="${NAMESERVER_DOMAIN:-$(if [ -e /etc/resolv.conf ]; then awk '/^domain / {$1=""; print $0}' /etc/resolv.conf; fi)}"
+		NAMESERVER_SEARCH="${NAMESERVER_SEARCH:-$(if [ -e /etc/resolv.conf ]; then awk '/^search / {$1=""; print $0}' /etc/resolv.conf; fi)}"
+		NAMESERVER_OPTIONS="${NAMESERVER_OPTIONS:-$(if [ -e /etc/resolv.conf ]; then awk '/^options / {$1=""; print $0}' /etc/resolv.conf; fi)}"
+	fi
+}
+
+Network ()
+{
+	db_get cnt-debconf/network0/bridge
+	NETWORK0_BRIDGE="${RET}" # string (w/o empty)
+
+	db_get cnt-debconf/network0/ipv4-method
+	NETWORK0_IPV4_METHOD="${RET}" # select
+
+	db_get cnt-debconf/network0/ipv4-comment
+	NETWORK0_IPV4_COMMENT="${RET}" # string (w/ empty)
+
+	db_get cnt-debconf/network0/ipv4-address
+	NETWORK0_IPV4_ADDRESS="${RET}" # string (w/o empty)
+
+	db_get cnt-debconf/network0/ipv4-broadcast
+	NETWORK0_IPV4_BROADCAST="${RET}" # string (w/ empty)
+
+	db_get cnt-debconf/network0/ipv4-gateway
+	NETWORK0_IPV4_GATEWAY="${RET}" # string (w/ empty)
+
+	db_get cnt-debconf/network0/ipv4-netmask
+	NETWORK0_IPV4_NETMASK="${RET}" # string (w/o empty)
+
+	db_get cnt-debconf/network0/ipv4-network
+	NETWORK0_IPV4_NETWORK="${RET}" # string (w/ empty)
+
+	db_get cnt-debconf/network0/ipv4-post-up
+	NETWORK0_IPV4_POST_UP="${RET}" # string (w/ empty)
+
+	db_get cnt-debconf/network0/ipv4-post-down
+	NETWORK0_IPV4_POST_DOWN="${RET}" # string (w/ empty)
+
+	db_get cnt-debconf/nameserver/server
+	NAMESERVER_SERVER="${RET}" # string (w/ empty)
+
+	db_get cnt-debconf/nameserver/domain
+	NAMESERVER_DOMAIN="${RET}" # string (w/ empty)
+
+	db_get cnt-debconf/nameserver/search
+	NAMESERVER_SEARCH="${RET}" # string (w/ empty)
+
+	db_get cnt-debconf/nameserver/options
+	NAMESERVER_OPTIONS="${RET}" # string (w/ empty)
+
+	Network_defaults
+
+	db_set cnt-debconf/network0/bridge "${NETWORK0_BRIDGE}"
+	db_fset cnt-debconf/network0/bridge seen false
+
+	db_set cnt-debconf/network0/ipv4-method "${NETWORK0_IPV4_METHOD}"
+	db_fset cnt-debconf/network0/ipv4-method seen false
+
+	db_set cnt-debconf/network0/ipv4-comment "${NETWORK0_IPV4_COMMENT}"
+	db_fset cnt-debconf/network0/ipv4-comment seen false
+
+	db_set cnt-debconf/network0/ipv4-address "${NETWORK0_IPV4_ADDRESS}"
+	db_fset cnt-debconf/network0/ipv4-address seen false
+
+	db_set cnt-debconf/network0/ipv4-broadcast "${NETWORK0_IPV4_BROADCAST}"
+	db_fset cnt-debconf/network0/ipv4-broadcast seen false
+
+	db_set cnt-debconf/network0/ipv4-gateway "${NETWORK0_IPV4_GATEWAY}"
+	db_fset cnt-debconf/network0/ipv4-gateway seen false
+
+	db_set cnt-debconf/network0/ipv4-netmask "${NETWORK0_IPV4_NETMASK}"
+	db_fset cnt-debconf/network0/ipv4-netmask seen false
+
+	db_set cnt-debconf/network0/ipv4-network "${NETWORK0_IPV4_NETWORK}"
+	db_fset cnt-debconf/network0/ipv4-network seen false
+
+	db_set cnt-debconf/network0/ipv4-post-up "${NETWORK0_IPV4_POST_UP}"
+	db_fset cnt-debconf/network0/ipv4-post-up seen false
+
+	db_set cnt-debconf/network0/ipv4-post-down "${NETWORK0_IPV4_POST_DOWN}"
+	db_fset cnt-debconf/network0/ipv4-post-down seen false
+
+	db_set cnt-debconf/nameserver/server "${NAMESERVER_SERVER}"
+	db_fset cnt-debconf/nameserver/server seen false
+
+	db_set cnt-debconf/nameserver/domain "${NAMESERVER_DOMAIN}"
+	db_fset cnt-debconf/nameserver/domain seen false
+
+	db_set cnt-debconf/nameserver/search "${NAMESERVER_SEARCH}"
+	db_fset cnt-debconf/nameserver/search seen false
+
+	db_set cnt-debconf/nameserver/options "${NAMESERVER_OPTIONS}"
+	db_fset cnt-debconf/nameserver/options seen false
+
+	db_settitle cnt-debconf/title
+	db_input high cnt-debconf/network0/ipv4-method || true
+	db_go
+
+	db_get cnt-debconf/network0/bridge
+	NETWORK0_BRIDGE="${RET}" # select
+
+	db_get cnt-debconf/network0/ipv4-method
+	NETWORK0_IPV4_METHOD="${RET}" # select
+
+	case "${NETWORK0_IPV4_METHOD}" in
+		none|dhcp)
+			;;
+
+		static)
+			db_settitle cnt-debconf/title
+			db_input high cnt-debconf/network0/ipv4-comment || true
+			db_go
+
+			db_settitle cnt-debconf/title
+			db_input high cnt-debconf/network0/ipv4-address || true
+			db_go
+
+			db_settitle cnt-debconf/title
+			db_input high cnt-debconf/network0/ipv4-broadcast || true
+			db_go
+
+			db_settitle cnt-debconf/title
+			db_input high cnt-debconf/network0/ipv4-gateway || true
+			db_go
+
+			db_settitle cnt-debconf/title
+			db_input high cnt-debconf/network0/ipv4-netmask || true
+			db_go
+
+			db_settitle cnt-debconf/title
+			db_input high cnt-debconf/network0/ipv4-network || true
+			db_go
+
+			db_settitle cnt-debconf/title
+			db_input high cnt-debconf/network0/ipv4-post-up || true
+			db_go
+
+			db_settitle cnt-debconf/title
+			db_input high cnt-debconf/network0/ipv4-post-down || true
+			db_go
+
+			db_settitle cnt-debconf/title
+			db_input high cnt-debconf/nameserver/server || true
+			db_go
+			;;
+	esac
+
+	NUMBER="0"
+
+	while db_get cnt-debconf/network${NUMBER}/ipv4-method && [ "${RET}" ]
+	do
+		if db_get cnt-debconf/network${NUMBER}/bridge
+		then
+			eval NETWORK${NUMBER}_BRIDGE="\"${RET}\"" # string (w/o empty)
+		fi
+
+		if db_get cnt-debconf/network${NUMBER}/ipv4-comment
+		then
+			eval NETWORK${NUMBER}_IPV4_COMMENT="\"${RET}\"" # string (w/ empty)
+		fi
+
+		if db_get cnt-debconf/network${NUMBER}/ipv4-method
+		then
+			eval NETWORK${NUMBER}_IPV4_METHOD="\"${RET}\"" # select
+		fi
+
+		if db_get cnt-debconf/network${NUMBER}/ipv4-address
+		then
+			eval NETWORK${NUMBER}_IPV4_ADDRESS="\"${RET}\"" # string (w/o empty)
+		fi
+
+		if db_get cnt-debconf/network${NUMBER}/ipv4-broadcast
+		then
+			eval NETWORK${NUMBER}_IPV4_BROADCAST="\"${RET}\"" # string (w/ empty)
+		fi
+
+		if db_get cnt-debconf/network${NUMBER}/ipv4-gateway
+		then
+			eval NETWORK${NUMBER}_IPV4_GATEWAY="\"${RET}\"" # string (w/ empty)
+		fi
+
+		if db_get cnt-debconf/network${NUMBER}/ipv4-netmask
+		then
+			eval NETWORK${NUMBER}_IPV4_NETMASK="\"${RET}\"" # string (w/o empty)
+		fi
+
+		if db_get cnt-debconf/network${NUMBER}/ipv4-network
+		then
+			eval NETWORK${NUMBER}_IPV4_NETWORK="\"${RET}\"" # string (w/ empty)
+		fi
+
+		if db_get cnt-debconf/network${NUMBER}/ipv4-post-up
+		then
+			eval NETWORK${NUMBER}_IPV4_POST_UP="\"${RET}\"" # string (w/ empty)
+		fi
+
+		if db_get cnt-debconf/network${NUMBER}/ipv4-post-down
+		then
+			eval NETWORK${NUMBER}_IPV4_POST_DOWN="\"${RET}\"" # string (w/ empty)
+		fi
+
+		NUMBER="$((${NUMBER} + 1))"
+	done
+
+	NETWORK_NUMBER="${NUMBER}"
+
+	db_get cnt-debconf/nameserver/server
+	NAMESERVER_SERVER="${RET}" # string (w/ empty)
+
+	db_get cnt-debconf/nameserver/domain
+	NAMESERVER_DOMAIN="${RET}" # string (w/ empty)
+
+	db_get cnt-debconf/nameserver/search
+	NAMESERVER_SEARCH="${RET}" # string (w/ empty)
+
+	db_get cnt-debconf/nameserver/options
+	NAMESERVER_OPTIONS="${RET}" # string (w/ empty)
+
+	Network_defaults
+
+	echo "NETWORK_NUMBER=\"${NETWORK_NUMBER}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+
+	for NUMBER in $(seq 0 ${NETWORK_NUMBER})
+	do
+		eval BRIDGE="$`echo NETWORK${NUMBER}_BRIDGE`"
+		echo "NETWORK${NUMBER}_BRIDGE=\"${BRIDGE}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+
+		eval COMMENT="$`echo NETWORK${NUMBER}_IPV4_COMMENT`"
+		echo "NETWORK${NUMBER}_IPV4_COMMENT=\"${COMMENT}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+
+		eval METHOD="$`echo NETWORK${NUMBER}_IPV4_METHOD`"
+		echo "NETWORK${NUMBER}_IPV4_METHOD=\"${METHOD}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+
+		eval ADDRESS="$`echo NETWORK${NUMBER}_IPV4_ADDRESS`"
+		echo "NETWORK${NUMBER}_IPV4_ADDRESS=\"${ADDRESS}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+
+		eval BROADCAST="$`echo NETWORK${NUMBER}_IPV4_BROADCAST`"
+		echo "NETWORK${NUMBER}_IPV4_BROADCAST=\"${BROADCAST}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+
+		eval GATEWAY="$`echo NETWORK${NUMBER}_IPV4_GATEWAY`"
+		echo "NETWORK${NUMBER}_IPV4_GATEWAY=\"${GATEWAY}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+
+		eval NETMASK="$`echo NETWORK${NUMBER}_IPV4_NETMASK`"
+		echo "NETWORK${NUMBER}_IPV4_NETMASK=\"${NETMASK}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+
+		eval NETWORK="$`echo NETWORK${NUMBER}_IPV4_NETWORK`"
+		echo "NETWORK${NUMBER}_IPV4_NETWORK=\"${NETWORK}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+
+		eval POST_UP="$`echo NETWORK${NUMBER}_IPV4_POST_UP`"
+		echo "NETWORK${NUMBER}_IPV4_POST_UP=\"${POST_UP}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+
+		eval POST_DOWN="$`echo NETWORK${NUMBER}_IPV4_POST_DOWN`"
+		echo "NETWORK${NUMBER}_IPV4_POST_DOWN=\"${POST_DOWN}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+	done
+
+	echo "NAMESERVER_SERVER=\"${NAMESERVER_SERVER}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+	echo "NAMESERVER_DOMAIN=\"${NAMESERVER_DOMAIN}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+	echo "NAMESERVER_SEARCH=\"${NAMESERVER_SEARCH}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+	echo "NAMESERVER_OPTIONS=\"${NAMESERVER_OPTIONS}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+}
+
+Root_password ()
+{
+	if db_get cnt-debconf/root-password
+	then
+		ROOT_PASSWORD="${RET}" # string (w/o empty)
+	fi
+
+	if [ -z "${ROOT_PASSWORD}" ]
+	then
+		# Create a random password as suggestion for the user
+		RANDOM_PASSWORD="$(dd if=/dev/urandom bs=12 count=1 2> /dev/null | base64)"
+
+		db_set cnt-debconf/root-password ${RANDOM_PASSWORD}
+		db_fset cnt-debconf/root-password seen false
+
+		db_settitle cnt-debconf/title
+		db_input high cnt-debconf/root-password || true
+		db_go
+
+		db_get cnt-debconf/root-password
+		ROOT_PASSWORD="${RET}"
+
+		if [ -z "${ROOT_PASSWORD}" ]
+		then
+			# User did set not set a password, falling back to random password
+			ROOT_PASSWORD="${RANDOM_PASSWORD}"
+		fi
+
+		if [ "${ROOT_PASSWORD}" = "${RANDOM_PASSWORD}" ]
+		then
+			echo "ROOT_RANDOM_PASSWORD=\"true\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+		fi
+	fi
+
+	echo "ROOT_PASSWORD=\"${ROOT_PASSWORD}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+}
+
+Internal_options ()
+{
+	if db_get cnt-debconf/apt-recommends
+	then
+		APT_RECOMMENDS="${RET}" # boolean (w/ empty)
+	fi
+
+	echo "APT_RECOMMENDS=\"${APT_RECOMMENDS}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+
+	if db_get cnt-debconf/debconf-frontend
+	then
+		DEBCONF_FRONTEND="${RET}" # select
+	fi
+
+	DEBCONF_FRONTEND="${DEBCONF_FRONTEND:-dialog}"
+	echo "DEBCONF_FRONTEND=\"${DEBCONF_FRONTEND}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+
+	if db_get cnt-debconf/debconf-priority
+	then
+		DEBCONF_PRIORITY="${RET}" # select
+	fi
+
+	DEBCONF_PRIORITY="${DEBCONF_PRIORITY:-high}"
+	echo "DEBCONF_PRIORITY=\"${DEBCONF_PRIORITY}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+
+	if db_get cnt-debconf/container-command
+	then
+		CONTAINER_COMMAND="${RET}" # string (w/ empty)
+	fi
+
+	echo "CONTAINER_COMMAND=\"${CONTAINER_COMMAND}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+
+	if db_get cnt-debconf/host-command
+	then
+		HOST_COMMAND="${RET}" # string (w/ empty)
+	fi
+
+	echo "HOST_COMMAND=\"${HOST_COMMAND}\"" >> "${DEBCONF_TMPDIR}/debconf.default"
+}
+
+Distribution
+Parent_distribution
+
+Architecture
+
+Archives
+Parent_archives
+
+Mirror
+Mirror_security
+
+Parent_mirror
+Parent_mirror_security
+
+Archive_areas
+Parent_archive_areas
+
+Packages
+Local_archives
+
+Network
+Root_password
+
+Internal_options
+
+db_stop
diff --git a/share/scripts/debconf.d/0003-debconf.templates b/share/scripts/debconf.d/0003-debconf.templates
new file mode 100644
index 0000000..1512f9f
--- /dev/null
+++ b/share/scripts/debconf.d/0003-debconf.templates
@@ -0,0 +1,211 @@
+Template: cnt-debconf/title
+Type: title
+Description: Open Infrastructure: container-tools
+
+Template: cnt-debconf/distribution
+Type: select
+Default:
+Choices-C: ${CHOICES_C}
+Choices: ${CHOICES}
+Description: Distribution
+ Distribution.
+
+Template: cnt-debconf/parent-distribution
+Type: select
+Default:
+Choices-C: ${CHOICES_C}
+Choices: ${CHOICES}
+Description: for internal use; can be preseeded
+ Parent Distribution.
+
+Template: cnt-debconf/architecture
+Type: select
+Default:
+Choices-C: ${CHOICES_C}
+Choices: ${CHOICES}
+Description: Architecture
+ Architecture.
+
+Template: cnt-debconf/archives
+Type: multiselect
+Default:
+Choices-C: ${CHOICES_C}
+Choices: ${CHOICES}
+Description: Archives
+ Archives.
+
+Template: cnt-debconf/parent-archives
+Type: multiselect
+Default:
+Choices-C: ${CHOICES_C}
+Choices: ${CHOICES}
+Description: Parent Archives
+ Parent Archives.
+
+Template: cnt-debconf/mirror
+Type: string
+Default:
+Description: Mirror
+ Mirror.
+
+Template: cnt-debconf/mirror-security
+Type: string
+Default:
+Description: Mirror Security
+ Mirror Security.
+
+Template: cnt-debconf/parent-mirror
+Type: string
+Default:
+Description: Parent Mirror
+ Parent Mirror.
+
+Template: cnt-debconf/parent-mirror-security
+Type: string
+Default:
+Description: Parent Mirror Security
+ Parent Mirror Security.
+
+Template: cnt-debconf/archive-areas
+Type: multiselect
+Default:
+Choices: ${CHOICES}
+Description: Archive Areas
+ Archive Areas.
+
+Template: cnt-debconf/parent-archive-areas
+Type: multiselect
+Default:
+Choices: ${CHOICES}
+Description: Parent Archive Areas
+ Parent Archive Areas.
+
+Template: cnt-debconf/packages
+Type: string
+Default:
+Description: Packages
+ Packages.
+
+Template: cnt-debconf/root-password
+Type: string
+Default:
+Description: Root password
+ Root password.
+
+Template: cnt-debconf/network0/bridge
+Type: string
+Default:
+Description: Bridge
+ Bridge.
+
+Template: cnt-debconf/network0/ipv4-method
+Type: select
+Choices: dhcp, static, none
+Default:
+Description: Ethernet Interface Method (IPv4)?
+ What method should be used to configure the ethernet interface?
+ .
+ This defaults to dhcp and will require that you run a dhcp-server in your
+ network.
+
+Template: cnt-debconf/network0/ipv4-comment
+Type: string
+Default:
+Description: Ethernet Interface Comment (IPv4)?
+ What optional comment would you like to give to the ethernet interface?
+ .
+ This defaults to empty.
+
+Template: cnt-debconf/network0/ipv4-address
+Type: string
+Default:
+Description: Ethernet IP Address (IPv4)?
+ What should be the IP address of the current system?
+ .
+ This defaults to 192.168.1.2.
+
+Template: cnt-debconf/network0/ipv4-broadcast
+Type: string
+Default:
+Description: Ethernet Broadcast Address (IPv4)?
+ What should be the broadcast address of the current system?
+ .
+ This defaults to empty.
+
+Template: cnt-debconf/network0/ipv4-gateway
+Type: string
+Default:
+Description: Ethernet Gateway Address (IPv4)?
+ What should be the gateway address of the current system?
+ .
+ This defaults to empty.
+
+Template: cnt-debconf/network0/ipv4-netmask
+Type: string
+Default:
+Description: Ethernet Network Mask (IPv4)?
+ What should be the netmask of the current system?
+ .
+ This defaults to empty.
+
+Template: cnt-debconf/network0/ipv4-network
+Type: string
+Default:
+Description: Ethernet Network Address (IPv4)?
+ What should be the network address of the current system?
+ .
+ This defaults to empty.
+
+Template: cnt-debconf/network0/ipv4-post-up
+Type: string
+Default:
+Description: Ethernet post-up Command (IPv4)?
+ What should be the post-up command for eth0?
+ .
+ This defaults to empty.
+
+Template: cnt-debconf/network0/ipv4-post-down
+Type: string
+Default:
+Description: Ethernet post-down Command (IPv4)?
+ What should be the post-down command for eth0?
+ .
+ This defaults to empty.
+
+Template: cnt-debconf/nameserver/server
+Type: string
+Default:
+Description: Nameserver Addresses?
+ What should be the IP addresses of the nameservers of the current system?
+ .
+ This defaults to empty. Multiple nameservers can be separated by whitespace.
+
+Template: cnt-debconf/nameserver/domain
+Type: string
+Default:
+Description: Nameserver Local Domain Name?
+ What should be local domain name used for name resolution?
+ .
+ See resolv.conf(5) for more information about the 'domain' option.
+ .
+ This defaults to empty.
+
+Template: cnt-debconf/nameserver/search
+Type: string
+Default:
+Description: Nameserver Search List?
+ What should be search list for hostname lookups?
+ .
+ See resolv.conf(5) for more information about the 'search' option.
+ .
+ This defaults to empty.
+
+Template: cnt-debconf/nameserver/options
+Type: string
+Default:
+Description: Nameserver Resolver Options?
+ What should be the resolver options?
+ .
+ See resolv.conf(5) for more information about the 'options' option.
+ .
+ This defaults to empty.