small updates

- start from new base image
- use dpkg -i, not gdebi, also skip apparmor not needed in Debian and wget already present