This ensures we're always up to date with our packages even if the
upstream container images lag behind debian proper. Useful for pulling
in bugfixes more quickly than upstream seems to think we want them.
Change-Id: Ia7ec97ca17ad1175c8ddd4c5d037f516dcdd891a