If they don't modify gpl code but just configure existing software and add their own packages, do they still have to pub everything?
You do not have to distribute proprietary source code which has not been incorporated into the GPL code (the definition of this varies depending on whether the GPL code is GPL, LGPL, etc.)