With self-contained configuration, the repository definitions will be predictable based on the target architecture and avoid leaking anything from the host.