conf_print_resolvconf() {
	fn conf_print_resolvconf

	cat <<-EOF
		nameserver 1.1.1.1
		nameserver 1.0.0.1
	EOF
}

conf_print_sourceslist() {
	fn conf_print_sourceslist
	req=(mirror release section)
	ckreq || return 1

	# this also happens in debootstrap but doesn't handle tor
	# this change should be made there.
	case ${mirror} in
	https://*)
		base_packages+="apt-transport-https ca-certificates"
		;;
	tor+http://*)
		base_packages+="apt-transport-tor ca-certificates"
	esac

	cat <<-EOF
		# Package repositories
		deb ${mirror} ${release} ${section}
		deb ${mirror} ${release}-updates ${section}
		deb ${mirror} ${release}-security ${section}
		#deb ${mirror} ${release}-backports ${section}

		# Source repositories
		#deb-src ${mirror} ${release} ${section}
		#deb-src ${mirror} ${release}-updates ${section}
		#deb-src ${mirror} ${release}-security ${section}
		#deb-src ${mirror} ${release}-backports ${section}
	EOF
}