GNU bug report logs - #47647
Feature request: Make guix communicate over Hidden Services

Previous Next

To reply to this bug, email your comments to 47647 AT debbugs.gnu.org.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: bo0od <bo0od <at> riseup.net>
To: bug-guix <at> gnu.org
Subject: Feature request: Make guix communicate over Hidden Services
Date: Wed, 7 Apr 2021 23:30:31 +0000

Hi There,

I hope to see guix has the ability to communicate over Tor (not TLS over 
Tor, but Tor-Tor (client-server), Something similar to how apt doing 
with apt-transport-tor https://packages.debian.org/buster/apt-transport-tor

This is mitigate the security problems of clearnet DNS,TLS and so as 
hiding metadata (more privacy).

ThX!

Message #8 received at 47647 <at> debbugs.gnu.org (full text, mbox):

From: Ludovic Courtès <ludo <at> gnu.org>
To: bo0od <bo0od <at> riseup.net>
Cc: 47647 <at> debbugs.gnu.org
Subject: Re: bug#47647: Feature request: Make guix communicate over Hidden
 Services
Date: Mon, 19 Apr 2021 18:39:55 +0200

Hi,

bo0od <bo0od <at> riseup.net> skribis:

> I hope to see guix has the ability to communicate over Tor (not TLS
> over Tor, but Tor-Tor (client-server), Something similar to how apt
> doing with apt-transport-tor
> https://packages.debian.org/buster/apt-transport-tor

Check out this cookbook recipe:

  https://guix.gnu.org/cookbook/en/html_node/Getting-substitutes-from-Tor.html

HTH!

Ludo’.

Message #11 received at 47647 <at> debbugs.gnu.org (full text, mbox):

From: bo0od <bo0od <at> riseup.net>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 47647 <at> debbugs.gnu.org
Subject: Re: bug#47647: Feature request: Make guix communicate over Hidden
 Services
Date: Mon, 19 Apr 2021 18:13:33 +0000

Yeah not clean connection, What i meant by this feature sorry i didnt 
say it clearer at the the first text which is Guix main repository 
guix-git must be mirrored over tor hidden services then when using guix 
install or guix pull or ...etc is going to be all over Tor (no TLS used).

This is what debian do, If i change main repositories from TLS -> Onion 
(apt-transport-tor pre-installed) then apt install or upgrade..etc i get 
everything over Tor without any leaks to clearnet/TLS.

Thats what i hope to see in Guix.

Ludovic Courtès:
> Hi,
> 
> bo0od <bo0od <at> riseup.net> skribis:
> 
>> I hope to see guix has the ability to communicate over Tor (not TLS
>> over Tor, but Tor-Tor (client-server), Something similar to how apt
>> doing with apt-transport-tor
>> https://packages.debian.org/buster/apt-transport-tor
> 
> Check out this cookbook recipe:
> 
>    https://guix.gnu.org/cookbook/en/html_node/Getting-substitutes-from-Tor.html
> 
> HTH!
> 
> Ludo’.
> 

Message #14 received at 47647 <at> debbugs.gnu.org (full text, mbox):

From: Ludovic Courtès <ludo <at> gnu.org>
To: bo0od <bo0od <at> riseup.net>
Cc: 47647 <at> debbugs.gnu.org
Subject: Re: bug#47647: Feature request: Make guix communicate over Hidden
 Services
Date: Tue, 20 Apr 2021 18:36:11 +0200

Hi,

bo0od <bo0od <at> riseup.net> skribis:

> Yeah not clean connection, What i meant by this feature sorry i didnt
> say it clearer at the the first text which is Guix main repository 
> guix-git must be mirrored over tor hidden services then when using
> guix install or guix pull or ...etc is going to be all over Tor (no
> TLS used).

OK, this is what the cookbook entry proposes, right?

The missing bit is accessing the Git repo of the ‘guix’ channel via an
Onion service (for ‘guix pull’), though one can easily create such a
mirror.

HTH,
Ludo’.

Message #17 received at 47647 <at> debbugs.gnu.org (full text, mbox):

From: bo0od <bo0od <at> riseup.net>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 47647 <at> debbugs.gnu.org
Subject: Re: bug#47647: Feature request: Make guix communicate over Hidden
 Services
Date: Tue, 20 Apr 2021 18:20:09 +0000

Yeah but how can someone create Tor mirror to guix upstream/main 
repository if its not done by the upstream themselves?

Unless user make his own server and get all guix packages there in order 
for him to have Tor-Tor connection from his own server/repository which 
is crazy amount of effort compared to just mounting the upstream main 
server (same server not different one) to Tor.

Having clearnet and Tor entries for same server way much easier to 
create new server just for Tor.

Ludovic Courtès:
> Hi,
> 
> bo0od <bo0od <at> riseup.net> skribis:
> 
>> Yeah not clean connection, What i meant by this feature sorry i didnt
>> say it clearer at the the first text which is Guix main repository
>> guix-git must be mirrored over tor hidden services then when using
>> guix install or guix pull or ...etc is going to be all over Tor (no
>> TLS used).
> 
> OK, this is what the cookbook entry proposes, right?
> 
> The missing bit is accessing the Git repo of the ‘guix’ channel via an
> Onion service (for ‘guix pull’), though one can easily create such a
> mirror.
> 
> HTH,
> Ludo’.
> 

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.