how to update mobian over tor - Printable Version

how to update mobian over tor - Printable Version

+- PINE64 (https://forum.pine64.org)
+-- Forum: PinePhone (https://forum.pine64.org/forumdisplay.php?fid=120)
+--- Forum: PinePhone Software (https://forum.pine64.org/forumdisplay.php?fid=121)
+---- Forum: Mobian on PinePhone (https://forum.pine64.org/forumdisplay.php?fid=139)
+---- Thread: how to update mobian over tor (/showthread.php?tid=15774)

Pages: 1 2

how to update mobian over tor - vusra - 01-17-2022

Code:
sudo apt install apt-transport-tor  tor

Edit /etc/apt/sources.list as root

Code:
sudo nano  /etc/apt/sources.list   

Make it look as

Code:
#deb  http://deb.debian.org/debian bookworm main

deb  tor://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian bookworm main

Edit /etc/apt/sources.list.d/extrepo_mobian.sources as root

Code:
sudo nano /etc/apt/sources.list.d/extrepo_mobian.sources

and put tor+ in front of the https://repo.mobian-project.org/ url

Code:
Uris: tor+https://repo.mobian-project.org/

Who knows why mobian doesn't use the debian-security repository by default? My mate says it is a good idea to add it to /etc/apt/sources.list

Code:
deb  tor://5ajw6aqf3ep7sijnscdzw77t7xq4xjpsy335yb2wiwgouo7yfxtjlmid.onion/debian-security bookworm-security main

RE: how to update mobian over tor - alanwake82 - 01-17-2022

Thanks I was looking for this :
Code:
#deb http://deb.debian.org/debian bookworm main
deb tor://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian bookworm main

Edit /etc/apt/sources.list.d/extrepo_mobian.sources as root

RE: how to update mobian over tor - vusra - 01-26-2022

Who knows why mobian doesn't use the debian-security repository by default?

RE: how to update mobian over tor - user641 - 01-29-2022

(01-26-2022, 02:14 PM)vusra Wrote: Who knows why mobian doesn't use the debian-security repository by default?

this is a good question, I believe it's because it may break the system, the same way as using Debian Sid you don't want the security repo as it's aimed at stable. Please correct me if I am wrong.

RE: how to update mobian over tor - vusra - 01-30-2022

(01-29-2022, 01:16 AM)user641 Wrote:
(01-26-2022, 02:14 PM)vusra Wrote: Who knows why mobian doesn't use the debian-security repository by default?

this is a good question, I believe it's because it may break the system, the same way as using Debian Sid you don't want the security repo as it's aimed at stable. Please correct me if I am wrong.

https://www.debian.org/security/faq#testing

Quote:Q: How is security handled for testing?

A: Security for testing benefits from the security efforts of the entire project for unstable. However, there is a minimum two-day migration delay, and sometimes security fixes can be held up by transitions. The Security Team helps to move along those transitions holding back important security uploads, but this is not always possible and delays may occur. Especially in the months after a new stable release, when many new versions are uploaded to unstable, security fixes for testing may lag behind. If you want to have a secure (and stable) server you are strongly encouraged to stay with stable.

Why mobian doesn't use the debian-security repository by default?

RE: how to update mobian over tor - user641 - 01-31-2022

(01-30-2022, 11:51 PM)vusra Wrote:
(01-29-2022, 01:16 AM)user641 Wrote:
(01-26-2022, 02:14 PM)vusra Wrote: Who knows why mobian doesn't use the debian-security repository by default?

this is a good question, I believe it's because it may break the system, the same way as using Debian Sid you don't want the security repo as it's aimed at stable. Please correct me if I am wrong.

https://www.debian.org/security/faq#testing

Quote:Q: How is security handled for testing?

A: Security for testing benefits from the security efforts of the entire project for unstable. However, there is a minimum two-day migration delay, and sometimes security fixes can be held up by transitions. The Security Team helps to move along those transitions holding back important security uploads, but this is not always possible and delays may occur. Especially in the months after a new stable release, when many new versions are uploaded to unstable, security fixes for testing may lag behind. If you want to have a secure (and stable) server you are strongly encouraged to stay with stable.

Why mobian doesn't use the debian-security repository by default?

From my understanding mobian does not use the debian-security repos for the same reason debian testing and unstable don't either. debian-security is meant for stable, and mobian is kind of a wip atm.

RE: how to update mobian over tor - vusra - 02-06-2022

According to faq bookworm or testing repo is supported by debian security team https://security.debian.org/debian-security/dists/ Why doesn't mobian use it by default?

RE: how to update mobian over tor - user641 - 02-11-2022

(01-17-2022, 01:48 PM)alanwake82 Wrote: Thanks I was looking for this :
Code:
#deb http://deb.debian.org/debian bookworm main
deb tor://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian bookworm main

Edit /etc/apt/sources.list.d/extrepo_mobian.sources as root

I just did the whole thing, but /etc/apt/sources.list.d/extrepo_mobian.sources on mine is empty, should I add the line:

Code:
tor+https://repo.mobian-project.org/

?

Is it /etc/apt/sources.list.d/mobian.list instead of /etc/apt/sources.list.d/extrepo_mobian.sources ?

RE: how to update mobian over tor - user641 - 02-11-2022

(02-06-2022, 05:00 AM)vusra Wrote: According to faq bookworm or testing repo is supported by debian security team https://security.debian.org/debian-security/dists/ Why doesn't mobian use it by default?

Now it got even more important to pay atention to the security aspect: https://blog.mobian-project.org/posts/2022/02/11/pinephone-malware-analysis/

"Disclaimer: while being enthusiastic nerds, none of the Mobian developers is a security expert."

RE: how to update mobian over tor - vusra - 07-09-2023

updated instructions for bookworm

Code:
sudo apt install apt-transport-tor  tor

make /etc/apt/sources.list look as

Code:
#deb http://deb.debian.org/debian bookworm main

#deb http://security.debian.org/ bookworm-security main

deb tor://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian bookworm main

deb tor://5ajw6aqf3ep7sijnscdzw77t7xq4xjpsy335yb2wiwgouo7yfxtjlmid.onion/debian-security bookworm-security main

make /etc/apt/sources.list.d/mobian.list look as

Code:
#deb http://repo.mobian.org/ bookworm main non-free-firmware

deb tor+https://repo.mobian.org/ bookworm main non-free-firmware