And this may be crazy… But for the installer repo. I made a skeleton tree with softlinks to the real xenial repo except xenial-updates which i made a directory, with perms set to 750.
This allows for installing with a masked xenial-updates. Once installed, the /etc/apt/sources list references the original repo. which sees the unmasked 755 xenial-update directory.
So after installation you can do apt update/apt upgrade & pull packages from xenial-upates.
.:
total 4
drwxr-xr-x 3 root root 4096 Aug 4 07:49 mirror
lrwxrwxrwx 1 root root 25 Aug 4 07:47 skel -> ../apt-mirror-xenial/skel
lrwxrwxrwx 1 root root 24 Aug 4 07:47 var -> ../apt-mirror-xenial/var
./mirror:
total 4
lrwxrwxrwx 1 root root 52 Aug 4 07:48 apt.dockerproject.org -> ../../apt-mirror-xenial/mirror/apt.dockerproject.org
lrwxrwxrwx 1 root root 48 Aug 4 07:49 ppa.launchpad.net -> ../../apt-mirror-xenial/mirror/ppa.launchpad.net
drwxr-xr-x 3 root root 4096 Aug 4 07:49 us.archive.ubuntu.com
./mirror/us.archive.ubuntu.com:
total 4
drwxr-xr-x 3 root root 4096 Aug 4 07:50 ubuntu
./mirror/us.archive.ubuntu.com/ubuntu:
total 8
drwxr-xr-x 3 root root 4096 Aug 4 07:52 dists
lrwxrwxrwx 1 root root 70 Aug 4 07:50 pool -> ../../../../apt-mirror-xenial/mirror/us.archive.ubuntu.com/ubuntu/pool
./mirror/us.archive.ubuntu.com/ubuntu/dists:
total 20
lrwxrwxrwx 1 root root 81 Aug 4 07:51 xenial -> ../../../../../apt-mirror-xenial/mirror/us.archive.ubuntu.com/ubuntu/dists/xenial
lrwxrwxrwx 1 root root 91 Aug 4 07:51 xenial-backports -> ../../../../../apt-mirror-xenial/mirror/us.archive.ubuntu.com/ubuntu/dists/xenial-backports
lrwxrwxrwx 1 root root 90 Aug 4 07:52 xenial-proposed -> ../../../../../apt-mirror-xenial/mirror/us.archive.ubuntu.com/ubuntu/dists/xenial-proposed
lrwxrwxrwx 1 root root 90 Aug 4 07:52 xenial-security -> ../../../../../apt-mirror-xenial/mirror/us.archive.ubuntu.com/ubuntu/dists/xenial-security
drwxr-x--- 2 root root 4096 Aug 4 07:54 xenial-updates
./mirror/us.archive.ubuntu.com/ubuntu/dists/xenial-updates:
total 36
lrwxrwxrwx 1 root root 110 Aug 4 07:54 Contents-amd64.gz -> ../../../../../../apt-mirror-xenial/mirror/us.archive.ubuntu.com/ubuntu/dists/xenial-updates/Contents-amd64.gz
lrwxrwxrwx 1 root root 109 Aug 4 07:54 Contents-i386.gz -> ../../../../../../apt-mirror-xenial/mirror/us.archive.ubuntu.com/ubuntu/dists/xenial-updates/Contents-i386.gz
lrwxrwxrwx 1 root root 102 Aug 4 07:54 InRelease -> ../../../../../../apt-mirror-xenial/mirror/us.archive.ubuntu.com/ubuntu/dists/xenial-updates/InRelease
lrwxrwxrwx 1 root root 97 Aug 4 07:54 main -> ../../../../../../apt-mirror-xenial/mirror/us.archive.ubuntu.com/ubuntu/dists/xenial-updates/main
lrwxrwxrwx 1 root root 103 Aug 4 07:54 multiverse -> ../../../../../../apt-mirror-xenial/mirror/us.archive.ubuntu.com/ubuntu/dists/xenial-updates/multiverse
lrwxrwxrwx 1 root root 100 Aug 4 07:54 Release -> ../../../../../../apt-mirror-xenial/mirror/us.archive.ubuntu.com/ubuntu/dists/xenial-updates/Release
lrwxrwxrwx 1 root root 104 Aug 4 07:54 Release.gpg -> ../../../../../../apt-mirror-xenial/mirror/us.archive.ubuntu.com/ubuntu/dists/xenial-updates/Release.gpg
lrwxrwxrwx 1 root root 103 Aug 4 07:54 restricted -> ../../../../../../apt-mirror-xenial/mirror/us.archive.ubuntu.com/ubuntu/dists/xenial-updates/restricted
lrwxrwxrwx 1 root root 101 Aug 4 07:54 universe -> ../../../../../../apt-mirror-xenial/mirror/us.archive.ubuntu.com/ubuntu/dists/xenial-updates/universe
william@dobie:~$