baseimage: add etckeeper, monit (but monit is disabled)