image: per-device rootfs: first remove, then install packages