+helm +werf in VM

contrib/k8s-seed.txt

@@ -30,7 +30,7 @@ d-i passwd/user-password-again password K8Sdemo
 
 # The user account will be added to some standard initial groups. To
 # override that, use this.
-#d-i passwd/user-default-groups string audio cdrom video
+#d-i passwd/user-default-groups string docker
 
 ### Clock and time zone setup
 d-i clock-setup/utc boolean true
@@ -64,7 +64,7 @@ tasksel tasksel/first multiselect none, ssh-server, standard
 # Individual additional packages to install
 d-i pkgsel/include string \
        apt-transport-https gnupg2 ca-certificates curl \
-       iptables linux-headers-amd64 git ansible
+       iptables linux-headers-amd64 git ansible wget
 
 # Whether to upgrade packages after debootstrap.
 # Allowed values: none, safe-upgrade, full-upgrade
@@ -90,11 +90,15 @@ d-i preseed/late_command string in-target /bin/sh -c " \
        update-alternatives --set ebtables /usr/sbin/ebtables-legacy ; \
        ( systemctl disable nftables && systemctl mask nftables ) ; \
        curl -s https://download.docker.com/linux/debian/gpg | sudo apt-key add - ; \
+       curl https://helm.baltorepo.com/organization/signing.asc | sudo apt-key add - ; \
        echo 'deb [arch=amd64] https://download.docker.com/linux/debian/ stretch stable' >/etc/apt/sources.list.d/docker.list ; \
+       echo 'deb https://baltocdn.com/helm/stable/debian/ all main' > /etc/apt/sources.list.d/helm-stable-debian.list ; \
        apt-get update ; \
        apt-get install -y \
-          docker-ce docker-ce-cli containerd.io ; \
+          docker-ce docker-ce-cli containerd.io helm ; \
        apt-get clean ; \
+       curl -L https://dl.bintray.com/flant/werf/v1.1.19+fix10/werf-linux-amd64-v1.1.19+fix10 -o /usr/bin/werf ; \
+       chmod +x /usr/bin/werf ; \
        systemctl enable serial-getty@ttyS0.service ; \
        systemctl enable docker.service  \
        || true"