diff --git a/bootstrap.sh b/bootstrap.sh
index 8ecf0ff..132f94f 100755
--- a/bootstrap.sh
+++ b/bootstrap.sh
@@ -17,9 +17,15 @@ debootstrap \
     --no-merged-usr \
     --variant=minbase jessie $rootfs
 
+chroot $rootfs apt-mark auto '.*' \
+       | sed '/not installed/d'
+chroot $rootfs apt-mark manual devuan-keyring
+
 bindir=usr/local/bin
 install -m 0755 -o root -g root scripts/* $rootfs/$bindir
 
 for script in $(ls $rootfs/$bindir); do
     chroot $rootfs /$bindir/$script
 done
+
+chroot $rootfs apt-get --purge autoremove -q -y
diff --git a/scripts/tweak-apt-config b/scripts/tweak-apt-config
index 6f34a48..cab2238 100755
--- a/scripts/tweak-apt-config
+++ b/scripts/tweak-apt-config
@@ -27,6 +27,12 @@ Acquire::CompressionTypes::Order { "gz"; };
 EOF
 chmod 0644 $cfg/docker-compress
 
+cat > $cfg/docker-suggests <<- EOF
+APT::Install-Suggests "false";
+APT::AutoRemove::SuggestsImportant "false";
+EOF
+chmod 0644 $cfg/docker-suggests
+
 cat > $cfg/docker-translations <<- EOF
 Acquire::Languages "none";
 EOF