diff --git a/deployment.sh b/deployment.sh
index 42fe463..869145f 100755
--- a/deployment.sh
+++ b/deployment.sh
@@ -778,6 +778,10 @@ fi
 # otherwise e2fsck fails with "need terminal for interactive repairs"
 echo FSCK=no >>/etc/debootstrap/config
 
+# otherwise we can't use packages with missing key http://deb.sipwise.com/autobuild/680FBA8A.asc
+# from our own $MIRROR - note: this could need some love...
+echo "DPKG_OPTIONS='-o APT::Get::AllowUnauthenticated=true -o aptitude::Cmdline::ignore-trust-violations=yes'" >> /etc/debootstrap/config
+
 # package selection
 cat > /etc/debootstrap/packages << EOF
 # addons: packages which d-i installs but debootstrap doesn't