Page 1 of 1

[SOLVED] islamic republic blocks Debian Repositories Mirrors for some times , What do You suggest ?

Posted: 2022-06-25 15:12
by Hadi_Lovelorn
Hi There
I live in Iran , islamic republic blocks many sites ( more than %60 of Web and also Tor network ) some times it blocks also Debian Repositories Mirrors ( including Original Repository ) I get error :

Code: Select all

Ign:1 https://repo.vivaldi.com/stable/deb stable InRelease                     
Hit:2 https://repo.vivaldi.com/stable/deb stable Release            
Err:4 http://security.debian.org/debian-security bullseye-security InRelease   
  Connection failed [IP: 151.101.242.132 80]
Err:5 http://deb.debian.org/debian bullseye InRelease
  Connection failed [IP: 151.101.242.132 80]
Err:6 http://deb.debian.org/debian bullseye-updates InRelease
  Connection failed [IP: 151.101.14.132 80]
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
1 package can be upgraded. Run 'apt list --upgradable' to see it.
W: Failed to fetch http://deb.debian.org/debian/dists/bullseye/InRelease  Connection failed [IP: 151.101.242.132 80]
W: Failed to fetch http://deb.debian.org/debian/dists/bullseye-updates/InRelease  Connection failed [IP: 151.101.14.132 80]
W: Failed to fetch http://security.debian.org/debian-security/dists/bullseye-security/InRelease  Connection failed [IP: 151.101.242.132 80]
W: Some index files failed to download. They have been ignored, or old ones used instead.
I checked other mirrors too , They are also blocked or so so slow ( I have a usual network , Not so slow ) .... I want to keep My Debian , Up to Date .... All VPNs are either blocked or too slowed down ( I use VPNBook but they slow down VPN protocols ) Tor network is also blocked , What do You suggest ?

Can Tor-APT use Tor-Network Bridges ? I never tested it , However many of bridges are blocked too ........ :(

Re: islamic republic blocks Debian Repositories Mirrors for some times , What do You suggest ?

Posted: 2022-06-25 16:17
by Bulkley
In my part of the world Internet security and privacy issues are mostly nuisance. Where you live, Internet security is is very serious. You need expert help.

What I would do is use Tails. The people behind Tails have long experience with issues like yours. Tails is based on Debian but shrouded with security. The first place to start is with Tails installed on a USB drive so that you can learn how to use it and learn what they did to make it work.

Another option is FreedomBox. I have no experience with FreedomBox but some other users here have. Also, the FreedomBox crew take Internet security very seriously.

In both cases you would be using Debian but it will be tailored for security and privacy.

Re: islamic republic blocks Debian Repositories Mirrors for some times , What do You suggest ?

Posted: 2022-06-25 17:56
by Hallvor

Re: islamic republic blocks Debian Repositories Mirrors for some times , What do You suggest ?

Posted: 2022-06-25 18:07
by anticapitalista
Hallvor wrote: 2022-06-25 17:56 https://www.debian.org/mirror/list

Iranian mirrors?
From your own link - these appear.

Iran
debian.asis.ai /debian/ amd64 arm64 armel armhf i386 mips mips64el mipsel powerpc ppc64el s390x
debian.parspack.com /debian/ amd64 arm64 armhf
mirror.aminidc.com /debian/ amd64 arm64 armel armhf i386 mips mips64el mipsel powerpc ppc64el s390x
mirrors.pardisco.co /debian/ amd64 i386

Re: islamic republic blocks Debian Repositories Mirrors for some times , What do You suggest ?

Posted: 2022-06-25 18:36
by Head_on_a_Stick
DNS over TLS is trivial to provision with systemd-resolved[0] and it is only blocked in ~57% of Iranian providers[1]. Worth a try?

Re: islamic republic blocks Debian Repositories Mirrors for some times , What do You suggest ?

Posted: 2022-06-25 18:39
by Hadi_Lovelorn
Bulkley

Hello Sir , I live in Iran , Thanks for Your attention . But Debian is so so Stable .... Tail OS like Ubuntu uses Debian Testing's kernel and components and daemons as core and other packages from Debian Unstable ....

Hallvor

Hello Sir , Thank You so much .... This server works fine :

http://debian.asis.ai/debian/

Can You guide me to set My sources.list repositories for this sever ? I fear to ruin the system .... I just tried to http://ftp.fr. etc and it's blocked too but I don't want to just chose "ir" how to set the server ? Thank You So Much

anticapitalista

Hello Sir , Thank You for Your attention .....

Re: islamic republic blocks Debian Repositories Mirrors for some times , What do You suggest ?

Posted: 2022-06-25 18:49
by Hadi_Lovelorn
Head_on_a_Stick

Hello Sir , I checked the link , But it only checks validation of DNS server and if it's not validate it will fail to use DNS .... And I'm sure Iran's Telecommunication ISP is not validate ( the ISP I use to connect the Internet )

Re: islamic republic blocks Debian Repositories Mirrors for some times , What do You suggest ?

Posted: 2022-06-25 18:51
by Hallvor
Just replace deb.debian.org with debian.asis.ai in your /etc/apt/sources.list, something like this:

Code: Select all

# main
deb http://debian.asis.ai/debian bullseye main contrib non-free

#security
deb http://security.debian.org/debian-security bullseye-security main contrib non-free

#bullseye-updates
deb http://debian.asis.ai/debian bullseye-updates main contrib non-free
I'm not sure if security works, though.

Re: islamic republic blocks Debian Repositories Mirrors for some times , What do You suggest ?

Posted: 2022-06-25 19:17
by Hadi_Lovelorn
Hallvor

Sir , Debian recognized the repository but still refuses to update and upgrade :

Code: Select all

Err:1 https://repo.vivaldi.com/stable/deb stable InRelease
  Could not connect to repo.vivaldi.com:443 (10.10.34.35). - connect (111: Connection refused)
Get:2 http://debian.asis.ai/debian bullseye InRelease [116 kB]
Hit:3 http://debian.asis.ai/debian bullseye-updates InRelease
Ign:4 http://debian.asis.ai/debian bullseye-security InRelease                 
Get:5 http://debian.asis.ai/debian bullseye/non-free Sources [80.6 kB]         
Get:6 http://debian.asis.ai/debian bullseye/main Sources [8,627 kB]            
Get:7 http://debian.asis.ai/debian bullseye/contrib Sources [43.0 kB]          
Get:8 http://debian.asis.ai/debian bullseye/main amd64 Packages [8,182 kB]     
Get:9 http://debian.asis.ai/debian bullseye/main Translation-en [6,241 kB]     
Get:10 http://debian.asis.ai/debian bullseye/main amd64 DEP-11 Metadata [4,049 kB]
Get:11 http://debian.asis.ai/debian bullseye/main DEP-11 48x48 Icons [3,478 kB]
Get:12 http://debian.asis.ai/debian bullseye/main DEP-11 64x64 Icons [7,315 kB]
Get:13 http://debian.asis.ai/debian bullseye/contrib amd64 Packages [50.5 kB]  
Get:14 http://debian.asis.ai/debian bullseye/contrib Translation-en [46.9 kB]  
Err:15 http://debian.asis.ai/debian bullseye-security Release                  
  404  Not Found [IP: 85.133.198.106 80]
Get:16 http://debian.asis.ai/debian bullseye/contrib amd64 DEP-11 Metadata [13.6 kB]
Get:17 http://debian.asis.ai/debian bullseye/contrib DEP-11 48x48 Icons [47.2 kB]
Get:18 http://debian.asis.ai/debian bullseye/contrib DEP-11 64x64 Icons [93.3 kB]
Get:19 http://debian.asis.ai/debian bullseye/non-free amd64 Packages [93.8 kB] 
Get:20 http://debian.asis.ai/debian bullseye/non-free Translation-en [91.3 kB] 
Get:21 http://debian.asis.ai/debian bullseye/non-free amd64 DEP-11 Metadata [17.9 kB]
Get:22 http://debian.asis.ai/debian bullseye/non-free DEP-11 48x48 Icons [741 B]
Get:23 http://debian.asis.ai/debian bullseye/non-free DEP-11 64x64 Icons [27.7 kB]
Reading package lists... Done                                                  
E: The repository 'http://debian.asis.ai/debian bullseye-security Release' does not have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Re: islamic republic blocks Debian Repositories Mirrors for some times , What do You suggest ?

Posted: 2022-06-25 19:20
by Hadi_Lovelorn
Hallvor

Sir , I fixed the Security page with :

http://debian.asis.ai/debian-security/

It worked , Thanks a lot

Re: islamic republic blocks Debian Repositories Mirrors for some times , What do You suggest ?

Posted: 2022-06-25 20:47
by Hallvor
Glad it worked. Thanks, that's good to know.

Please edit the title of your first post and add [solved] for future reference.