[tor-relays] Onion repository Re: Debian is not allowing tor to update despite it being listed as a trusted respritory

[Jonas Friedli]

apt update ; apt install tor apt-transport-tor -y
sed -i 
's/https:\/\/deb.debian.org/tor+http:\/\/2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/g' 
/etc/apt/sources.list
sed -i 
's/https:\/\/security.debian.org/tor+http:\/\/5ajw6aqf3ep7sijnscdzw77t7xq4xjpsy335yb2wiwgouo7yfxtjlmid.onion/g' 
/etc/apt/sources.list
echo "deb 
tor+http://apow7mjfryruh65chtdydfmqfpj5btws7nbocgtaovhvezgccyjazpqd.onion/torproject.org 
   bullseye            main" >> 
/etc/apt/sources.list.d/deb.torproject.org.list
echo "deb-src 
tor+http://apow7mjfryruh65chtdydfmqfpj5btws7nbocgtaovhvezgccyjazpqd.onion/torproject.org 
   bullseye            main" >> 
/etc/apt/sources.list.d/deb.torproject.org.list
apt update ; apt install gpg gpg-agent torsocks wget -y
torsocks wget -qO- 
http://apow7mjfryruh65chtdydfmqfpj5btws7nbocgtaovhvezgccyjazpqd.onion/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc| 
gpg --import
gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | apt-key add -




##
# source : 
http://jvgypgbnfyvfopg5msp6nwr2sl2fd6xmnguq35n7rfkw3yungjn2i4yd.onion

In particular, once you have the apt-transport-tor package installed, 
the following entries should work in your sources list for a Debian system:

deb 
tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian 
           buster            main
deb 
tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian 
           buster-updates    main
deb 
tor+http://5ajw6aqf3ep7sijnscdzw77t7xq4xjpsy335yb2wiwgouo7yfxtjlmid.onion/debian-security 
buster/updates    main

#deb 
tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian 
           buster-backports  main



lists at for-privacy.net:
> On Tuesday, May 3, 2022 7:31:46 AM CEST Keifer Bly wrote:
> 
>> So I am running a tor relay on Debian, but no matter what when updating tor
>> there is an “updating from such a respiritpry can’t be done securely and is
>> therefore disabled by default”. Here is the log
>>
>>   
> 
> In addition to the outdated certificates, you get Tor for Ubuntu and not
> Debian:
> 
>>   
>>
>> Get:1 http://security.debian.org buster/updates InRelease [65.4 kB]
>>
>> Hit:2 http://deb.debian.org/debian buster InRelease
>>
>> Get:3 http://deb.debian.org/debian buster-updates InRelease [51.9 kB]
>>
>> Get:4 http://deb.debian.org/debian buster-backports InRelease [46.7 kB]
>>
>> Ign:5 http://ftp.de.debian.org/debian stretch InRelease
>>
>> Hit:6 http://ftpde.debian.org/debian stretch Release
> I would delete the outdated Debian stretch archives.
> 
>> Ign:7 http://deb.torproject.org/torproject.org trusty InRelease
>>
>> Ign:8 http://deb.torproject.org/torproject.org trusty Release
>>
> 
> Trusty? Why are you using Tor for Ubuntu? For Debian Buster you should also
> use the buster archive:
> 
> deb https://deb.torproject.org/torproject.org buster main
> 
> 
> _______________________________________________
> tor-relays mailing list
> tor-relays at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x4A148E3AB438EC68.asc
Type: application/pgp-keys
Size: 665 bytes
Desc: OpenPGP public key
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20220607/e8a0e800/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 236 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20220607/e8a0e800/attachment-0001.sig>