# Obfs4proxy package on debian
**URL:** https://forum.torproject.org/t/obfs4proxy-package-on-debian/2379
**Category:** Relay Operator
**Created:** [March 3, 2022, 6:58pm UTC](https://forum.torproject.org/t/obfs4proxy-package-on-debian/2379 "2022-03-03T18:58:05Z")
**Posts on this page:** 10
**Page:** 1
### Author:  [@Superpaul209](https://forum.torproject.org/u/Superpaul209)
#### Post date: [March 3, 2022, 6:58pm UTC](https://forum.torproject.org/t/obfs4proxy-package-on-debian/2379/1 "2022-03-03T18:58:06Z")
Hi,
I have seen multiple persons saying that the obfs4proxy package in the debian official repository isn’t the latest version available. Should I delete the package that I installed from the debian repository ? Do you have a step-by-step tutorial how to build it from source ?
Actual version of the package Im using :
obfs4proxy/stable,now 0.0.8-1+b6 amd64 [installed]
pluggable transport proxy for Tor, implementing obfs4
I don’t know what are the risks about using an old version of this package from the official repository of debian on my bridges. If I need to build it from source, I will do it. Like I did with the tor package.
You can also tell me if I need to build other packages from source instead of using apt to install them. It would be nice to improve the security of my bridges.
Thanks for your help !
---
### Author:  [@martln](https://forum.torproject.org/u/martln)
#### Post date: [March 3, 2022, 7:52pm UTC](https://forum.torproject.org/t/obfs4proxy-package-on-debian/2379/2 "2022-03-03T19:52:56Z")
Hi, I was about to point you to the Tor Debian repo, but noticed that there is no package named `obfs4proxy` in it.
```auto
apt list obfs4proxy -a
Listing... Done
obfs4proxy/stable 0.0.8-1+b6 amd64
```
And on my bridge:
```auto
apt list --installed obfs4proxy -a
Listing... Done
obfs4proxy/stable,now 0.0.8-1+b6 amd64 [installed]
```
Cross check at the tor repo itself: [Index of /torproject.org/pool/main/o](https://deb.torproject.org/torproject.org/pool/main/o/)
So there is only the package from the Debian repos. I use Bullseye and have the same as you. So I assume that you also use Bullseye.
```auto
lsb_release -d
Description: Debian GNU/Linux 11 (bullseye)
apt list --installed obfs4proxy -a
Listing... Done
obfs4proxy/stable,now 0.0.8-1+b6 amd64 [installed]
```
---
### Author:  [@Superpaul209](https://forum.torproject.org/u/Superpaul209)
#### Post date: [March 3, 2022, 7:57pm UTC](https://forum.torproject.org/t/obfs4proxy-package-on-debian/2379/3 "2022-03-03T19:57:04Z")
Yes im using Debian Bullseye mainly and I have also one bridge on Debian Buster
---
### Author:  [@martln](https://forum.torproject.org/u/martln)
#### Post date: [March 3, 2022, 8:03pm UTC](https://forum.torproject.org/t/obfs4proxy-package-on-debian/2379/4 "2022-03-03T20:03:54Z")
Then you are up to date with the OS. [Index of /debian/pool/main/o/obfs4proxy](https://ftp.debian.org/debian/pool/main/o/obfs4proxy/)
Only in Bookworm you get the version 0.0.13 [Debian -- Details of package obfs4proxy in bookworm](https://packages.debian.org/bookworm/obfs4proxy)
If you absolutely want to use the more current version, then do the following:
```auto
sudo cp /etc/apt/sources.list /etc/sources.list.d/testing.list
sudo sed -i 's/bullseye/bookworm/g' /etc/apt/sources.list.d/testing.list
```
Then as root:
```auto
cat << EOF > /etc/apt/preferences.d/stable.pref
Package: *
Pin: release a=stable
Pin priority: 900
EOF
```
```auto
cat << EOF > /etc/apt/preferences.d/testing.pref
Package: *
Pin: release a=testing
Pin priority: 400
EOF
```
And finally:
```auto
sudo apt update
sudo apt -t bookworm install obfs4proxy
```
---
### Author:  [@Superpaul209](https://forum.torproject.org/u/Superpaul209)
#### Post date: [March 3, 2022, 8:14pm UTC](https://forum.torproject.org/t/obfs4proxy-package-on-debian/2379/5 "2022-03-03T20:14:02Z")
Thanks for the details how to get the newest package 👍
I am surprised that this package is still considered to be in the test phase after several months and several versions released. And more for knowledge, what is more secure and recommended between choosing the official OS package or the last package released by the developer directly ?
It could refer to the package of tor which must be built from source, but for other packages the best is those of the OS. Each one has a different situation and I never know which method to use that is best.
---
### Author:  [@martln](https://forum.torproject.org/u/martln)
#### Post date: [March 3, 2022, 9:17pm UTC](https://forum.torproject.org/t/obfs4proxy-package-on-debian/2379/6 "2022-03-03T21:17:33Z")
> [@Superpaul209](#):
>
> And more for knowledge, what is more secure and recommended between choosing the official OS package or the last package released by the developer directly ?
If the developer releases a package as stable, then one may trust him so far that it can be used also without large risk.
> [@Superpaul209](#):
>
> It could refer to the package of tor which must be built from source, but for other packages the best is those of the OS. Each one has a different situation and I never know which method to use that is best.
You can be divided on that.
I have been an enthusiast of the “debian way” for decades. But this package is different from the rest of the Tor project.
I install `tor` via the official debian repository from the tor project. This is also part of the “debian-way”. But I only do this because it is officially recommended. If this recommendation was not, I would use the packages from the debian repository that are packaged and provided by debian itself.
If I now have the choice to compile a current package myself or to use it from the debian repo of debian, then I choose the repo.
It saves a lot of work to keep it up to date and I get support from both torproject and debian project.
So concretely: `obfs4proxy` I will get from debian repository until torproject provides a package in their own repository.
---
### Author:  [@Superpaul209](https://forum.torproject.org/u/Superpaul209)
#### Post date: [March 3, 2022, 9:38pm UTC](https://forum.torproject.org/t/obfs4proxy-package-on-debian/2379/7 "2022-03-03T21:38:12Z")
Everything seems clear to me with your explanations. I just noticed that I bother too much to build from source the tor package when I can simply install it with apt from the beginning … well, a beginner’s mistake happens. 😅
Is there an open way to propose to add the obfs4proxy package in the official tor repo? Do you think it would be useful to have them officially support the package ? so that we can benefit from a possible better compatibility and more frequent updates. Maybe I’m talking too fast, I’m new in the project
if they decide to leave it like that, I’ll just rely on what Debian offers for this package, that’s good enough.
---
### Author:  [@martln](https://forum.torproject.org/u/martln)
#### Post date: [March 3, 2022, 9:57pm UTC](https://forum.torproject.org/t/obfs4proxy-package-on-debian/2379/8 "2022-03-03T21:57:52Z")
Since the obfs4 upstream is independent of the torproject, I don’t think it is necessary or even wanted.
This is where the development takes place: [Yawning Angel / obfs4 · GitLab](https://gitlab.com/yawning/obfs4) Cooperation with the various distributions also seems to be excellent, so there will be no need to change the current state.
---
### Author:  [@Superpaul209](https://forum.torproject.org/u/Superpaul209)
#### Post date: [March 3, 2022, 10:14pm UTC](https://forum.torproject.org/t/obfs4proxy-package-on-debian/2379/9 "2022-03-03T22:14:06Z")
Alright sounds good. Thanks for your time and your answers. 💯
I understand better how it works. If anyone wants to talk about this topic I can leave it open or I’ll put it in solved.
---
### Author:  [@meskio](https://forum.torproject.org/u/meskio)
#### Post date: [March 4, 2022, 11:46am UTC](https://forum.torproject.org/t/obfs4proxy-package-on-debian/2379/10 "2022-03-04T11:46:09Z")
The new version of obfs4proxy is in its way to get into debian backports, so in few days we expect to be possible to install it from there without needing to use testing. Actually it includes some security fixes, so it will be great if people updates by then. The related issue:
> **[Sign in · GitLab](https://gitlab.torproject.org/users/sign_in)**
>
> Welcome to The Tor Project's Gitlab