{{IntroLike| Sometimes the Debian and/or {{project_name_short}} onion servers are non-functional. This could be due to DDoS attacks on the Tor network. * https://blog.torproject.org/how-handle-millions-new-tor-clients/ * https://lists.torproject.org/pipermail/tor-dev/2020-March/014211.html * https://lists.torproject.org/pipermail/tor-dev/2020-June/014381.html * https://forums.whonix.org/t/suspicious-rise-in-of-tor-users/4673 As a result, updates cannot be completed automatically and an error message similar to the one below will appear. }} Command: {{CodeSelect|code= sudo apt update }} Expected output: {{CodeSelect|code= Hit:1 https://security.debian.org {{Stable project version based on Debian codename}}/updates InRelease Hit:2 tor+http://deb.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion {{Stable project version based on Debian codename}} InRelease Ign:3 https://ftp.us.debian.org/debian {{Stable project version based on Debian codename}} InRelease Hit:4 https://deb.{{project_clearnet}} {{Stable project version based on Debian codename}} InRelease Hit:5 https://ftp.us.debian.org/debian {{Stable project version based on Debian codename}} Release Err:7 tor+http://5ajw6aqf3ep7sijnscdzw77t7xq4xjpsy335yb2wiwgouo7yfxtjlmid.onion {{Stable project version based on Debian codename}}/updates InRelease SOCKS proxy socks5h://localhost:9050 could not connect to 5ajw6aqf3ep7sijnscdzw77t7xq4xjpsy335yb2wiwgouo7yfxtjlmid.onion (0.0.0.0:0) due to: Host unreachable (6) Err:8 tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian {{Stable project version based on Debian codename}} InRelease SOCKS proxy socks5h://localhost:9050 could not connect to 2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion (0.0.0.0:0) due to: Host unreachable (6) Reading package lists… Done W: Failed to fetch tor+http://5ajw6aqf3ep7sijnscdzw77t7xq4xjpsy335yb2wiwgouo7yfxtjlmid.onion/dists/{{Stable project version based on Debian codename}}/updates/InRelease SOCKS proxy socks5h://localhost:9050 could not connect to 5ajw6aqf3ep7sijnscdzw77t7xq4xjpsy335yb2wiwgouo7yfxtjlmid.onion (0.0.0.0:0) due to: Host unreachable (6) W: Failed to fetch tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian/dists/{{Stable project version based on Debian codename}}/InRelease SOCKS proxy socks5h://localhost:9050 could not connect to 2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion (0.0.0.0:0) due to: Host unreachable (6) W: Some index files failed to download. They have been ignored, or old ones used instead. }} Until the onion service is re-established, complete the following steps in {{project_name_gateway_long}} to circumvent the issue. If similar issues occur with {{project_name_short}} onion services, then follow the same procedure and modify the derivative.sources files. https://forums.whonix.org/t/errors-updating-september-2018/6028 {{Box|text= '''1.''' Open the Debian ''sources'' in an editor. {{Open with root rights|filename= /etc/apt/sources.list.d/debian.sources }} '''2.''' Disable the onionized Debian repositories and enable the clearnet repositories. The code blocks should look like this; only these entries require editing. https://salsa.debian.org/fasttrack-team/support/-/issues/27. {{CodeSelect|code= ######## ENABLED SOURCES ######## Types: deb URIs: tor+https://deb.debian.org/debian Suites: {{Stable project version based on Debian codename}} {{Stable project version based on Debian codename}}-updates {{Stable project version based on Debian codename}}-backports Components: main contrib non-free non-free-firmware Enabled: yes # <<<<< change this line from "no" to "yes" Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg Types: deb URIs: tor+https://deb.debian.org/debian-security Suites: {{Stable project version based on Debian codename}}-security Components: main contrib non-free non-free-firmware Enabled: yes # <<<<< change this line from "no" to "yes" Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg Types: deb URIs: tor+https://fasttrack.debian.net/debian-fasttrack Suites: {{Stable project version based on Debian codename}}-fasttrack {{Stable project version based on Debian codename}}-backports-staging Components: main contrib non-free Enabled: yes # <<<<< keep this line saying "yes" Signed-By: /usr/share/keyrings/fasttrack-archive-keyring.gpg ######## DISABLED BY DEFAULT SOURCES ######## #### deb #### Types: deb URIs: tor+http://2s4yqjx5ul6okpp3f2gaunr2syex5jgbfpfvhxxbbjwnrsvbk5v3qbid.onion/debian Suites: {{Stable project version based on Debian codename}} {{Stable project version based on Debian codename}}-updates {{Stable project version based on Debian codename}}-backports Components: main contrib non-free non-free-firmware Enabled: no # <<<<< change this line from "yes" to "no" Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg Types: deb URIs: tor+http://5ajw6aqf3ep7sijnscdzw77t7xq4xjpsy335yb2wiwgouo7yfxtjlmid.onion/debian-security Suites: {{Stable project version based on Debian codename}}-security Components: main contrib non-free non-free-firmware Enabled: no # <<<<< change this line from "yes" to "no" Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg ## No onion for fasttrack yet: https://salsa.debian.org/fasttrack-team/support/-/issues/27 }} Save and exit. '''3.''' Confirm the clearnet repositories are functional. {{CodeSelect|code= sudo apt update }} '''4.''' ''Optional:'' Revert and update the package lists. Consider reverting these changes later on, because onion repositories offer various security advantages. Afterwards, apply [[#Updates|Updates]] to refresh the package lists. }} {{Header}} {{Footer}}