diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 58e147737fd3a2890ee7c181404e24b4c31f6149..f5b7195dcccf12f187e5e12b8bafe414cd78112f 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -7,6 +7,8 @@ stages:
 
 .job_template: &job_definition
   stage: publish
+  tags:
+    - whitewhale
   # Only build packages for https://0xacab.org/leap/bitmask-dev, not
   # for forks
   image: "0xacab.org:4567/leap/gitlab-buildpackage:build_${DIST}_${ARCH}"
@@ -14,12 +16,14 @@ stages:
     - "pwd; git describe"
     - git checkout incoming
     - git checkout origin/master debian/ helpers/
-    #- build-build-package
+    - git add debian/* helpers/*
+    - git commit -m 'autocommit for debian folder'
+    - build-build-package
     # Test the package with lintian
-    #- build-test-lintian
-    #- upload-package
+    - build-test-lintian
+    - upload-package
     # sleep 1h to allow debugging of running container
-    - sleep 9999
+    #- sleep 9999
   artifacts:
     expire_in: 1w
     paths:
@@ -29,10 +33,24 @@ stages:
     - '*.deb'
     - 'results/*'
 
-package:amd64_stretch:
+#package:amd64_stretch:
+#  variables:
+#    ARCH: "amd64"
+#    DIST: "stretch"
+#    REPONAMES: "client"
+#    # need these because there are some go packages not in stretch
+#    # unfortunately, they aren't in stretch-backports either
+#    - echo 'deb http://deb.debian.org/debian stretch-backports main' > /etc/apt/sources.list.d/backports.list
+#    - echo 'deb-src http://deb.debian.org/debian stretch main' > /etc/apt/sources.list.d/sources.list
+#    # Default is to fail on warnings, we disable it here
+#    # unless all lintian warnings are fixed (#9033)
+#    LINTIAN_OPTS: "-X filename-length, --suppress-tags newer-standards-version"
+#  <<: *job_definition
+
+package:amd64_buster:
   variables:
     ARCH: "amd64"
-    DIST: "stretch"
+    DIST: "buster"
     REPONAMES: "client"
     # Default is to fail on warnings, we disable it here
     # unless all lintian warnings are fixed (#9033)
diff --git a/debian/control b/debian/control
index 5341fa0c1a27f71d3fb6b0312ee43965f18caac4..95fb5f5ae3665d6d895e4949913ecfb1d15f099e 100644
--- a/debian/control
+++ b/debian/control
@@ -2,7 +2,7 @@ Source: riseup-vpn
 Section: net
 Priority: extra
 Maintainer: LEAP Encryption Access Project <debian@leap.se>
-Build-Depends: debhelper (>= 10.0.0), dh-golang, golang-go (> 2:1.9),
+Build-Depends: debhelper (>= 10.0.0), dh-golang, golang-go (>> 2:1.9),
     golang-golang-x-text-dev (>= 0.3.0-2),
     libgtk-3-dev, libappindicator3-dev, pkg-config
 Standards-Version: 3.9.8
diff --git a/debian/gbp.conf b/debian/gbp.conf
new file mode 100644
index 0000000000000000000000000000000000000000..066343568b7fc55fc383e5ed697d80eb55d88e60
--- /dev/null
+++ b/debian/gbp.conf
@@ -0,0 +1,6 @@
+[import-orig]
+pristine-tar=False
+
+[buildpackage]
+upstream-tree=SLOPPY
+debian-branch=incoming