declarative DSL for Debian APT