Add install action to base service

The base service may install packages, such as iptables, so it should have an install action.