Onionizing Qubes-Whonix Repositories

[Patrick]

@torjunkie

I understand this is coming up for Whonix 14 - see https://phabricator.whonix.org/T399 - but it is worth re-iterating that hardening the current stable Whonix 13 can be achieved by defaulting the mirrors in sources.list to .onions

Yes.

Ultimate Nitpick: General, not Qubes-Whonix specific hardening.

@torjunkie

Is editing the sources.list already documented?

• only Whonix APT Repository
• related Install Additional Software Safely
• in context of Non-Qubes, Debian hosts: Advanced Security Guide - Whonix

So in short, no, I don’t think switching to onion sources is documented. But very much worth it. Where to best add it? Security guide?

Once Whonix 14 is released, that adding onions should be prefered even when adding third party sources - needs to be added somewhere here: Install Additional Software Safely