How to fetch Tor Debian packages over Tor

Learn how to configure Apt to use Tor, ensuring your package downloads from deb.torproject.org remain private and resistant to censorship.

The Tor Project maintains an official Debian package repository deb.torproject.org, which is also served through via an Onion Service: http://apow7mjfryruh65chtdydfmqfpj5btws7nbocgtaovhvezgccyjazpqd.onion/

如需使用 Apt over Tor（通过 Tor 网络的 apt），需要安装 apt transport 工具：

$ sudo apt install apt-transport-tor

然后，需要在/etc/apt/sources.list 或 /etc/apt/sources.list.d/的新文件中加入下列条目：

# 对于稳定版。
deb [signed-by=/usr/share/keyrings/deb.torproject.org-keyring.gpg] tor+http://apow7mjfryruh65chtdydfmqfpj5btws7nbocgtaovhvezgccyjazpqd.onion/torproject.org <DISTRIBUTION> main

# 对于不稳定版。
deb [signed-by=/usr/share/keyrings/deb.torproject.org-keyring.gpg] tor+http://apow7mjfryruh65chtdydfmqfpj5btws7nbocgtaovhvezgccyjazpqd.onion/torproject.org tor-nightly-main-<DISTRIBUTION> main

用操作系统代号替换 <DISTRIBUTION> 。运行lsb_release -c 或者cat /etc/debian_version查看操作系统的版本。

从 Debian bookworm 开始，您还可以使用更现代的 deb822 风格：

# echo "\
Types: deb deb-src
Components: main
Suites: bookworm
URIs: tor+http://apow7mjfryruh65chtdydfmqfpj5btws7nbocgtaovhvezgccyjazpqd.onion/torproject.org
Architectures: amd64 arm64 i386
Signed-By: /usr/share/keyrings/deb.torproject.org-keyring.gpg
" | sudo tee /etc/apt/sources.list.d/tor.sources

For onion services run by the Debian project, please refer to their official documentation.