Update mirror urls and add rootpw lock