* pin chef to 11.8.2, and use debian intsead
* call apt-get update before any other steps