how to update mobian over tor

[vusra]

Code:

sudo apt install apt-transport-tor  tor

 Edit  /etc/apt/sources.list  as root

Code:

sudo nano  /etc/apt/sources.list   

Make it look as

Code:

#deb  http://deb.debian.org/debian bookworm main
deb  tor://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian bookworm main

Edit  /etc/apt/sources.list.d/extrepo_mobian.sources  as root

Code:

sudo nano /etc/apt/sources.list.d/extrepo_mobian.sources

and put    tor+  in front of  the https://repo.mobian-project.org/   url

Code:

Uris: tor+https://repo.mobian-project.org/

---

Who knows why mobian doesn't use the debian-security repository by default?   My mate says it is a good idea to add it to /etc/apt/sources.list

Code:

deb  tor://5ajw6aqf3ep7sijnscdzw77t7xq4xjpsy335yb2wiwgouo7yfxtjlmid.onion/debian-security bookworm-security main

[alanwake82]

Thanks I was looking for this :
Code:
#deb http://deb.debian.org/debian bookworm main
deb tor://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian bookworm main

Edit /etc/apt/sources.list.d/extrepo_mobian.sources as root

[vusra]

Who knows why mobian doesn't use the debian-security repository by default?

[user641]

Who knows why mobian doesn't use the debian-security repository by default?

this is a good question, I believe it's because it may break the system, the same way as using Debian Sid you don't want the security repo as it's aimed at stable. Please correct me if I am wrong.

[vusra]

Who knows why mobian doesn't use the debian-security repository by default?

this is a good question, I believe it's because it may break the system, the same way as using Debian Sid you don't want the security repo as it's aimed at stable. Please correct me if I am wrong.

https://www.debian.org/security/faq#testing 

Q: How is security handled for testing?

A: Security for testing benefits from the security efforts of the entire project for unstable. However, there is a minimum two-day migration delay, and sometimes security fixes can be held up by transitions. The Security Team helps to move along those transitions holding back important security uploads, but this is not always possible and delays may occur. Especially in the months after a new stable release, when many new versions are uploaded to unstable, security fixes for testing may lag behind. If you want to have a secure (and stable) server you are strongly encouraged to stay with stable.

Why mobian doesn't use the debian-security repository by default?

[user641]

Who knows why mobian doesn't use the debian-security repository by default?

this is a good question, I believe it's because it may break the system, the same way as using Debian Sid you don't want the security repo as it's aimed at stable. Please correct me if I am wrong.

https://www.debian.org/security/faq#testing 

Q: How is security handled for testing?

A: Security for testing benefits from the security efforts of the entire project for unstable. However, there is a minimum two-day migration delay, and sometimes security fixes can be held up by transitions. The Security Team helps to move along those transitions holding back important security uploads, but this is not always possible and delays may occur. Especially in the months after a new stable release, when many new versions are uploaded to unstable, security fixes for testing may lag behind. If you want to have a secure (and stable) server you are strongly encouraged to stay with stable.

Why mobian doesn't use the debian-security repository by default?

From my understanding mobian does not use the debian-security repos for the same reason debian testing and unstable don't either. debian-security is meant for stable, and mobian is kind of a wip atm.

[vusra]

According to faq bookworm or testing repo is supported by debian security team https://security.debian.org/debian-security/dists/    Why doesn't mobian use it by default?

[user641]

Thanks I was looking for this :
Code:
#deb  http://deb.debian.org/debian bookworm main
deb  tor://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian bookworm main

Edit  /etc/apt/sources.list.d/extrepo_mobian.sources  as root

I just did the whole thing, but /etc/apt/sources.list.d/extrepo_mobian.sources on mine is empty, should I add the line:

Code:

tor+https://repo.mobian-project.org/

?

Is it /etc/apt/sources.list.d/mobian.list instead of /etc/apt/sources.list.d/extrepo_mobian.sources ?

[user641]

According to faq bookworm or testing repo is supported by debian security team https://security.debian.org/debian-security/dists/    Why doesn't mobian use it by default?

Now it got even more important to pay atention to the security aspect: https://blog.mobian-project.org/posts/20...-analysis/

"Disclaimer: while being enthusiastic nerds, none of the Mobian developers is a security expert."

[vusra]

updated instructions for bookworm

Code:

sudo apt install apt-transport-tor  tor

make /etc/apt/sources.list look as

Code:

#deb http://deb.debian.org/debian bookworm main
#deb http://security.debian.org/ bookworm-security main
deb tor://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian bookworm main
deb tor://5ajw6aqf3ep7sijnscdzw77t7xq4xjpsy335yb2wiwgouo7yfxtjlmid.onion/debian-security bookworm-security main

make /etc/apt/sources.list.d/mobian.list look as

Code:

#deb http://repo.mobian.org/ bookworm main non-free-firmware
deb tor+https://repo.mobian.org/ bookworm main non-free-firmware