diff --git a/Dockerfile.base b/Dockerfile.base
index bba3987..7faa62a 100644
--- a/Dockerfile.base
+++ b/Dockerfile.base
@@ -47,7 +47,18 @@ RUN divert_true() { divert-rm.sh "$1" ; ln -sv /bin/true "$1" ; } ; \
     divert_true /usr/bin/deb-systemd-invoke
 
 RUN apt-env.sh apt-get update ; \
+    apt-remove.sh \
+      ca-certificates \
+      e2fsprogs \
+    ; \
     apt-env.sh apt-get upgrade -y ; \
+    apt-install.sh \
+      cron \
+      logrotate \
+      netbase \
+      openssl \
+      procps \
+    ; \
     apt-clean.sh
 
 ## perl-base: hardlink->symlink
@@ -78,6 +89,7 @@ RUN set -f ; \
       chsh \
       cpgr \
       cppw \
+      crontab \
       ctrlaltdel \
       debugfs \
       delgroup \
@@ -194,12 +206,6 @@ RUN set -f ; \
         done ; \
     done
 
-RUN apt-remove.sh \
-      ca-certificates \
-      e2fsprogs \
-    ; \
-    apt-clean.sh
-
 ## "docker.io/python"-specific cleanup
 RUN rm -f /root/.wget-hsts
 
diff --git a/Dockerfile.deps b/Dockerfile.deps
index 0c6fbef..9ce4ee9 100644
--- a/Dockerfile.deps
+++ b/Dockerfile.deps
@@ -80,10 +80,7 @@ RUN apt-install.sh \
       dumb-init \
       gettext-base \
       jq \
-      netbase \
       netcat-openbsd \
-      openssl \
-      procps \
       psmisc \
       zstd \
     ; \