// E2E target-image apt resilience. Direct upstream is less forgiving than
// the apt-cacher-ng we used to proxy through: the first cold `apt update`
// after a fresh boot can return 0 with partial repo data (universe missing),
// which then makes downstream package installs fail with confusing
// "No package matching 'X' is available" errors. Retries + generous
// timeouts make the update robust.
Acquire::Retries "5";
Acquire::http::Timeout "30";
Acquire::https::Timeout "30";