Recently I have switched my sys-net, sys-firewall and sys-usb qubes from debian-11 templates to debian-11-minimal templates. And I plan to further make use of minimal templates for different use-cases of my computer usage (email, instant chat, web browsing, journaling, etc.)
Now, my sys-net, sys-firewall, and sys-usb qubes all have their own, distinct, minimal templates, deb11min-net, deb11min-fw and deb11min-usb, respectively.
And I notice that updating these minimal templates is essentially downloading the updates to debian minimal template 3 times (once for each -net, -fw and -usb templates).
This is not smart, and I would like to alleviate this effort.
So, the question I am wondering is this: Can I have a root minimal template, from which the -net, -fw and -usb minimal templates branch out and specialize? Specialization in this context means installing specific packages to the branch-templates.
This way the debian-11-minimal apt updates would be downloaded once and would be effective at the same time in deb11min-net, deb11min-fw and deb11min-usb templates, at once. And updating the -net, -fw, and -usb templates would include only downloading and updating their specialization packages.
,---> deb11min-net (Template) ---> deb11min-net-dvm (Disposable Template) ---> sys-net (Dispoasble AppVM) debian-11-minimal (Template) ---> deb11min-fw (Template) ---> deb11min-fw-dvm (Disposable Template) ---> sys-firewall (Disposable AppVM) \---> deb11min-usb (Template) ---> deb11min-usb-dvm (Disposable Template) ---> sys-usb (Disposable AppVM)
In this scheme, updateing debian-11-minimal template would at the same time find updating affect on the deb11min-net, deb11min-fw, deb11min-usb templates, not necessitating downloading the same update packages 3x times over.
Am I making sense? Or do I have a flaw in my understanding of templates?