diff --git a/post-debootstrap-installer.sh b/post-debootstrap-installer.sh
index d24501f..af485b5 100755
--- a/post-debootstrap-installer.sh
+++ b/post-debootstrap-installer.sh
@@ -23,7 +23,10 @@ apt-get -y install locales
 
 ### boot
 
-apt-get -y install mdadm cryptsetup systemd systemd-sysv dropbear-initramfs btrfs-tools firmware-linux
+apt-get -y install mdadm cryptsetup systemd systemd-sysv btrfs-tools firmware-linux
+
+# --force-confold because we already provide /etc/dropbear-initramfs/config
+apt-get -y -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" install dropbear-initramfs
 
 # generate minimal mdadm.conf
 mdadm --examine --scan | perl -pe 's/.*\/dev\/md\/?([0-9]+) .*UUID\=(.+?) .*/ARRAY \/dev\/md$1 UUID=$2/' > /etc/mdadm/mdadm.conf
@@ -46,6 +49,9 @@ sed -i "s/%esp_uuid%/${esp_uuid}/" /etc/fstab
 
 ### networking
 
+# --force-confold because we already provide /etc/nftables.conf
+apt-get -y -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" install nftables
+
 # generate configs for systemd-networkd.service
 # this is template specific
 "/hardware-setup/hardware/${1}/network.sh"