On a related note, do you get rid of templates for security reasons?
Not sure what you are asking. Maybe if I get rid of templates that are EOL’ed?
I use all debian-minimal. There is a new version every 2 years and each EOL’s after approximately 5 years. When there is a new stable, I upgrade to the new stable and get rid of the old ones after a short safety period (until I am sure the new templates work fine).
I had almost two full years on buster and will now have smooth sailing until approx. August 2023. However if at that time I don’t feel like upgrading, I don’t have to do anything until August 2026.
Finally I have documented for myself all modifications I ever made to each of my templates in the form of bash scripts. So even when R4.1 is released, I will simply install the respective debian-minimal template, run my bash scripts and be done.
With those cycle times and the bash scripts EOL events are a non-issue to me.