I came across a tool that will generate a bit-for-bit identical Debian container [1], using Debian package snapshots.

[1] https://github.com/debuerreotype/debuerreotype