- ensure unkin-ca-certificates are installed - find the default incus remote and use that for images - dont set publish_remote_name - build incus images for the base image - build puppet-base image for incus only