jenkins ALL=  \
	NOPASSWD: /usr/sbin/debootstrap *, \
	/usr/sbin/chroot /chroots/*, \
	/bin/rm -rf --one-file-system /chroots/*, \
	/bin/umount -l /chroots/*

# keep these environment variables
Defaults        env_keep += "http_proxy", env_reset