apt-get update needs to be hard-locked on apt-get install or the install will fail