Updates over Tor

[anon3066456]

So if you enable the option “Enable system and template updates over the Tor anonymity network using Whonix” during installation, is this referring to all updates from that point on? I’ve seen a few people say they have problems with this because they ticked the box, yet their updates still sometimes go through the clear net.

Qubes Template updates not happening over Tor

I have Qubes installed on a few machines and both times I swear there was a check box to force all dom0 AND template vm updates over tor. But I noticed template vms were still using clearnet. Looking at the /etc/qubes-rpc/policy/qubes.UpdatesProxy file I see “#Upgrade all TemplateVMs through sys-whonix” and “#$type:TemplateVM $default allow,target=sys-whonix”. This tells me that the TemplateVMs are NOT being routed over Tor and was not set that way during installation. While the default rule f…

https://www.reddit.com/r/Qubes/comments/sf068m/failed_connections_to_tor_but_updates_through/

This can be a serious security hazard and be used to de-anonymize someone.

[fsflover]

@anon3066456

s this referring to all updates from that point on?

Yes.

@anon3066456

I’ve seen a few people say they have problems with this because they ticked the box, yet their updates still sometimes go through the clear net.

As @adw said in the link, if it’s the case, it must be a bug. If you can, please verify this and fill a bug report.

[anon3066456]

I never had any problems with this, was just wondering how this feature worked and saw some people have problems with this. Thanks for the reply.