On first boot, auto-apt-archive will configure the closest Ubuntu package archives, so you will need to check /etc/apt/sources.d/sources.list and security.sources.list to see what is set. The default is archive.ubuntu.com.
Additionally, you'll also want to add the TurnKey archive: archive.turnkeylinux.org
If you are using TKLBAM, then you'll need to add hub.turnkeylinux.org as well as which ever storage endpoint is used. Also, you'll need to add pool.ntp.org (note that this a round-robin address, which might complicate things depending on how your whitelisting works).
Depending on the appliances you're using, you might need to add others (e.g. DNS, SMTP) but the above should be mostly generic.
This should get you started
On first boot, auto-apt-archive will configure the closest Ubuntu package archives, so you will need to check /etc/apt/sources.d/sources.list and security.sources.list to see what is set. The default is archive.ubuntu.com.
Additionally, you'll also want to add the TurnKey archive: archive.turnkeylinux.org
If you are using TKLBAM, then you'll need to add hub.turnkeylinux.org as well as which ever storage endpoint is used. Also, you'll need to add pool.ntp.org (note that this a round-robin address, which might complicate things depending on how your whitelisting works).
Depending on the appliances you're using, you might need to add others (e.g. DNS, SMTP) but the above should be mostly generic.