jenkins ALL=  \
	NOPASSWD: /usr/sbin/debootstrap *, \
	/usr/bin/tee /schroots/*, \
	/usr/bin/tee -a /schroots/*, \
	/usr/bin/tee /etc/schroot/chroot.d/jenkins*, \
	/bin/chmod +x /schroots/*, \
	/usr/sbin/chroot /schroots/*, \
	/bin/rm -rf --one-file-system /schroots/*, \
	/bin/rm -rf --one-file-system /srv/live-build/*, \
	/bin/mv /schroots/* /schroots/*, \
	/bin/umount -l /schroots/*, \
	/bin/mount --bind *, \
	/usr/bin/killall timeout, \
	/usr/sbin/slay 1111, \
	/usr/sbin/slay 2222, \
	/usr/sbin/slay jenkins

# keep these environment variables
Defaults        env_keep += "http_proxy", env_reset