fix: align 90-cleanup.sh with 90-cleanup-qemu.sh for SSH stability

Key changes:
- Set multi-user.target as default boot target to prevent graphical boot issues
- Move apt-get update/upgrade to after autoremove (matching qemu script order)
- Protect libevent-2.1-7t64 from autoremove (needed by PgBouncer)
- Add journalctl cleanup commands for proper log rotation
- Add fstrim at end to optimize disk

These changes align the AWS AMI cleanup script with the QEMU cleanup script
which has been working. The most critical fix is setting multi-user.target
as default, which ensures the system boots properly for SSH access.

Author: samrose

scripts/90-cleanup.sh

@@ -42,8 +42,8 @@ elif [ -n "$(command -v apt-get)" ]; then
 
   source /etc/os-release
 
-  apt-get -y update
-  apt-get -y upgrade
+  # Protect critical runtime packages from autoremove
+  apt-mark manual libevent-2.1-7t64
 
   # Ensure cloud-init and openssh-server are installed
   # They may have been removed as dependencies during package cleanup
@@ -57,18 +57,34 @@ elif [ -n "$(command -v apt-get)" ]; then
 
   apt-get -y autoremove
   apt-get -y autoclean
+
+  apt-get -y update
+  apt-get -y upgrade
 fi
+
+# Set multi-user target (non-graphical) as default
+systemctl set-default multi-user.target
+systemctl disable getty@tty1.service
+systemctl mask getty@tty1.service
+systemctl mask graphical.target
+
 rm -rf /tmp/* /var/tmp/*
 history -c
 cat /dev/null > /root/.bash_history
 unset HISTFILE
+
+journalctl --rotate
+journalctl --vacuum-time=1s
 find /var/log -mtime -1 -type f -exec truncate -s 0 {} \;
 rm -rf /var/log/*.gz /var/log/*.[0-9] /var/log/*-????????
 rm -rf /var/lib/cloud/instances/*
 rm -f /root/.ssh/authorized_keys /etc/ssh/*key*
 touch /etc/ssh/revoked_keys
 chmod 600 /etc/ssh/revoked_keys
 
+cat /dev/null > /var/log/lastlog
+cat /dev/null > /var/log/wtmp
+
 # Securely erase the unused portion of the filesystem
 GREEN='\033[0;32m'
 NC='\033[0m'
@@ -87,4 +103,5 @@ dd if=/dev/zero of=/zerofile &
       sleep 5
     done
 sync; rm /zerofile; sync
-cat /dev/null > /var/log/lastlog; cat /dev/null > /var/log/wtmp
+
+fstrim /