We previously announced that the Qubes Tor onion services were no longer being maintained due to lack of resources. However, Unman generously agreed to bring them back, and they’re now available once again!

Here are the new onion service URLs:

Website: www.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion Yum repo: yum.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion Deb repo: deb.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion ISOs: iso.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion

Soon, you will be able to get the new, correct repo definitions just by updating dom0 and your TemplateVMs. However, if you can’t wait, you can edit your repository definitions by following the instructions below.

Instructions

Follow these instructions only if you wish to update dom0 and your TemplateVMs over Tor (via sys-whonix ). This is an opt-in feature. If, instead, you wish to update over your regular network connection (aka “clearnet”), or if you are not sure, then do not follow these instructions.

In order to use the new onion services, you must ensure that every line that contains an onion address uses the appropriate new address above. We’ll go through this for dom0, Fedora templates, Debian, and Whonix templates. For additional information, see Onionizing Repositories on the Whonix wiki.

dom0

In dom0, open /etc/yum.repos.d/qubes-dom0.repo in a text editor. Comment out all the baseurl = https://yum.qubes-os.org/[...] and metalink lines. Uncomment all the baseurl = [...].onion lines. Update every .onion address to yum.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion . The affected lines should look like this: #baseurl = https://yum.qubes-os.org/r$releasever/current/dom0/fc25 baseurl = http://yum.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r$releasever/current/dom0/fc25 #metalink = https://yum.qubes-os.org/r$releasever/current/dom0/fc25/repodata/repomd.xml.metalink Open /etc/yum.repos.d/qubes-templates.repo in a text editor and repeat steps 2-4. In Qubes Global Settings, set Dom0 UpdateVM to sys-whonix .

Fedora TemplateVMs

In the TemplateVM, open /etc/yum.repos.d/qubes-r4.repo in a text editor. Comment out every line that contains yum.qubes-os.org . Uncomment every line that contains .onion . Update every .onion address to yum.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion . The affected lines should look like this: #baseurl = https://yum.qubes-os.org/r4.0/current/vm/fc$releasever baseurl = http://yum.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/r4.0/current/vm/fc$releasever In dom0, ensure that the first non-comment line in /etc/qubes-rpc/policy/qubes.UpdatesProxy is: $type:TemplateVM $default allow,target=sys-whonix

Debian & Whonix TemplateVMs