Lock apt cookbook, update readme