extrepo - safely adding repos

Extrepo is a specialized tool in Debian (sid) for handling adding external repos in a safe and secure way. Might be useful for a bunch of tutorials in our documentation:


Edit by Patrick:


Quoted, replied here just now:
Chromium Browser for Kicksecure Discussions (not Whonix) - #70 by Patrick

a Torproject repo - which I haven’t checked yet but may be a more direct way to obtain newer TBB releases.

That’s apparently just the “normal” https://deb.torproject.org/torproject.org/ with its “usual” contents. I.e. no Tor Browser as Debian package.


As far as I understand, extrepo doesn’t invent its own software. It’s not a kind of flathub. extrepo is a tool to make adding repositories such as https://deb.torproject.org/torproject.org/, https://download.docker.com/linux/debian, https://dl.winehq.org/wine-builds/debian, etc. easier. Kinda a way to upload an APT signing key to Debian and /etc/apt/sources.list.d drop-in configuration snippet by sending a pull request to the extrepo-data repository.

1 Like

Refactoring default installed packages…

Should extrepo be installed by default on Whonix-Gateway? Usefulness? Some future hypothetical situation where extrepo might be useful to get a newer Tor version?

I guess, for now, no - unless there are arguments for it.

Yeah that sounds pretty useful. If extrepo isn’t and/or grabbing too many dependencies it would be good to keep around.

1 Like

sudo apt install extrepo
Reading package lists… Done
Building dependency tree… Done
Reading state information… Done
The following additional packages will be installed:
The following NEW packages will be installed:
extrepo libcryptx-perl
0 upgraded, 2 newly installed, 0 to remove and 4 not upgraded.
Need to get 635 kB of archives.
After this operation, 2,060 kB of additional disk space will be used.
Do you want to continue? [Y/n]

Seems OK.

extrepo is installed by default since Whonix 16.

1 Like
1 Like

This was merged. Yay! Thank you!

Should install Debian -- Package Search Results -- extrepo-offline-data by default when porting to Debian bookworm.

extrepo feature request:
extrepo apt-transport-tor and onion support

1 Like


This might happen. Upstream looking for feedback.

1 Like

News there.

1 Like

This got implemented.