KEYRING := keys/debian-archive-${release}-stable.gpg
KEYRING := keys/debian-archive-${release}-automatic.gpg
-KEYRING := keys/debian-archive-${release}-security-automatic.gpg
+# KEYRING := keys/debian-archive-${release}-security-automatic.gpg
ifndef SOURCES
-define SOURCES :=
-deb http://cdn.debian.net/debian ${release} main
-deb http://security.debian.org/ ${release}/updates main
-endef
+ ifneq "$(filter stretch jessie buster, ${release})" ""
+ define SOURCES :=
+ deb http://cdn.debian.net/debian ${release} main
+ deb https://deb.debian.org/debian-security/ ${release}/updates main
+ endef
+ else
+ define SOURCES :=
+ deb http://cdn.debian.net/debian ${release} main
+ deb https://deb.debian.org/debian-security/ ${release}-security main
+ endef
+ endif
endif
ifdef disk