iptables os-apply-config os-is-bootstrap-host os-refresh-config package-installs use-ephemeral