Mostly fixes for docker

- Docker from standard debian repo
- Don't purge firewall rules (need to figure how to keep puppet chains
  and rules)