don't NAT traffic between containers
disable apt auto update