Johannes Schauer: > 1. file wishlist bugs against the wrappers, asking them to allow passing > additional options to their $DEBOOTSTRAP invocation
I guess this is the cleaner way and should be attempted first. That might also help to, - make programs that use of $DEBOOTSTRAP switch to use mmdebstrap by default. - when $DEBOOTSTRAP is set to mmdebstrap, adding the Debian security repository. - make more users benefit from this security improvement by default without knowing. In case 1. fails, 2. can still be attempted. Cheers, Patrick
