`salt`: Initializing an `aur.chaos.cx`-using Archlinux (offline) template - Using the update proxy for `gpg` keys et al

User Support
21

I can download the file using Tor Browser so it should work.
For curl to work you can try to use in curl the same headers/user agent/etc as in browser.

22

Jup same here -Torbrowser works. curl via sys-tor doesn’t. How would you go about extracting/reconstructing the headers?

23

Making curl impersonate Firefox | lwt hiker … sigh.

24

Apparently this whole discussion is a classical case of “should have RTFM” … man qvm-service reads among many other things:

qubes-updates-proxy
              Default: enabled in NetVM

              Provide proxy service, which allow access only to yum repos. Filtering is
              done based on URLs, so it shouldn't be used as leak control (pretty  easy
              to bypass), but is enough to prevent some erroneous user actions.

… so anything NOT repos is apparently filtered and the whole endeavor to force downloading though the update proxy hopeless … switching strategy.

Thanks @apparatus for sticking through this with me.

25

I think documentation is outdated here.
The filtering was disabled long ago:

26

Oh. And I thought I had figured it out …