[tor-relays] Updating tor issue

https://metrics.torproject.org/rs.html#details/79E3B585803DE805CCBC00C1EF36B1E74372861D

Hi, so for my relay at the address above, when trying to update tor, suddenly getting the “updating from such a respiratory can’t be done securly” message. Odd as this just suddenly started happening.

Here is my sources file.

What is the correct format for adding tor as a trusted source?

Thanks.

deb-src http://deb.debian.org/debian buster main

Major bug fix updates produced after the final release of the

distribution.

deb http://security.debian.org/ buster/updates main
deb-src http://security.debian.org/ buster/updates main

Uncomment the following two lines to add software from the ‘backports’

repository.

···

–Keifer

1 Like

What is the correct format for adding tor as a trusted source?

A not outdated system. ¹AFAIK obfs4proxy for buster (oldoldstable) has had a
security hole for a long time and you are putting your users at risk!

deb-src Index of /debian buster main
deb http://security.debian.org/ buster/updates main
deb-src http://security.debian.org/ buster/updates main

First upgrade the system. buster -> bullseye -> bookworm
https://www.debian.org/releases/buster/

https://www.debian.org/releases/bullseye/releasenotes
https://www.debian.org/releases/stable/releasenotes

Reinstalling might be easier.

¹Upgrading your old system & obfs4proxy was recommended here 2-3 years ago.
Somehow you're going around in circles.

···

On Freitag, 3. Mai 2024 17:00:44 CEST Keifer Bly wrote:

--
╰_╯ Ciao Marco!

Debian GNU/Linux

It's free software and it gives you freedom!

2 Likes

System is up to date, I run apt-get update regularly.

···

–Keifer

System is up to date, I run apt-get update regularly.

Did you even only read 2 sentences from the link?
Buster is EOL and will be completely archived in a few weeks.

> Debian -- Debian “buster” Release Information

Debian is 2 releases ahead!
You won't get 3rd party packages (tor) anymore.

···

On Freitag, 3. Mai 2024 18:17:41 CEST Keifer Bly wrote:

--
╰_╯ Ciao Marco!

Debian GNU/Linux

It's free software and it gives you freedom!

Ok thanks.

···

On Mon, May 6, 2024, 3:20 PM <lists@for-privacy.net> wrote:

On Freitag, 3. Mai 2024 18:17:41 CEST Keifer Bly wrote:

System is up to date, I run apt-get update regularly.

Did you even only read 2 sentences from the link?
Buster is EOL and will be completely archived in a few weeks.

https://www.debian.org/releases/buster/
Debian is 2 releases ahead!
You won’t get 3rd party packages (tor) anymore.


╰_╯ Ciao Marco!

Debian GNU/Linux

It’s free software and it gives you freedom!_______________________________________________
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

–Keifer

Right? Why comment if your just going to be such a jerk and not be helpful?

I am just unable to figure why this would suddenly happen when the relay has been updating without issue and suddenly this happens, have been keeping Debian up to date using apt-get update so wondering what else needs to be done? Thanks.

···

–Keifer

What they told you, maybe a bit harsh, is that you are using a very old Debian version that will soon be end of life and won’t get updates anymore. apt-get upgrade doesn’t upgrade to new releases, you have to do it “manually”. Think like a Windows 7 to Windows 10 upgrade which also doesn’t happen with the normal Windows updates. You can either upgrade from your current version Buster (10 )–> Bullseye (11) → Bookworm (12) or just reinstall it with Bullseye and configure it again.

Bauruine

···

On 07.05.24 19:50, Keifer Bly wrote:

Right? Why comment if your just going to be such a jerk and not be helpful?

I am just unable to figure why this would suddenly happen when the relay has been updating without issue and suddenly this happens, have been keeping Debian up to date using apt-get update so wondering what else needs to be done? Thanks.

–Keifer

On Mon, May 6, 2024 at 4:12 PM Micah Elizabeth Scott <beth@torproject.org> wrote:

On 5/6/24 3:19 PM, lists@for-privacy.net wrote:

Did you even only read 2 sentences from the link?

Can we stop just accepting behavior like this on the tor community’s
mailing lists?

Seriously, it makes us all look bad.

I’m sorry folks have to endure so much just to use a computer program
that’s intended to be humane and helpful.

–beth


tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

_______________________________________________
tor-relays mailing list
[tor-relays@lists.torproject.org](mailto:tor-relays@lists.torproject.org)
[https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays](https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays)

1 Like

Sorry I meant reinstall it with Bookworm of course. You can backup and restore your keys if you like so you are not loosing your relays history. There is some documentation at https://community.torproject.org/relay/setup/post-install/ “Backup Tor Identity Keys”

···

On 08.05.24 10:16, Bauruine wrote:

What they told you, maybe a bit harsh, is that you are using a very old Debian version that will soon be end of life and won’t get updates anymore. apt-get upgrade doesn’t upgrade to new releases, you have to do it “manually”. Think like a Windows 7 to Windows 10 upgrade which also doesn’t happen with the normal Windows updates. You can either upgrade from your current version Buster (10 )–> Bullseye (11) → Bookworm (12) or just reinstall it with Bullseye and configure it again.

Bauruine

On 07.05.24 19:50, Keifer Bly wrote:

Right? Why comment if your just going to be such a jerk and not be helpful?

I am just unable to figure why this would suddenly happen when the relay has been updating without issue and suddenly this happens, have been keeping Debian up to date using apt-get update so wondering what else needs to be done? Thanks.

–Keifer

On Mon, May 6, 2024 at 4:12 PM Micah Elizabeth Scott <beth@torproject.org> wrote:

On 5/6/24 3:19 PM, lists@for-privacy.net wrote:

Did you even only read 2 sentences from the link?

Can we stop just accepting behavior like this on the tor community’s
mailing lists?

Seriously, it makes us all look bad.

I’m sorry folks have to endure so much just to use a computer program
that’s intended to be humane and helpful.

–beth


tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

_______________________________________________
tor-relays mailing list
[tor-relays@lists.torproject.org](mailto:tor-relays@lists.torproject.org)
[https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays](https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays)

_______________________________________________
tor-relays mailing list
[tor-relays@lists.torproject.org](mailto:tor-relays@lists.torproject.org)
[https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays](https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays)

Ok. So the vps I have is command line only, is there a way to update to debian 11 via the command line? Thanks.

–Keifer

···

–Keifer

Doing it via this guide here:

https://phoenixnap.com/kb/upgrade-debian-10-to-11

What other changes need to be made? Thanks.

···

–Keifer

–Keifer

Doing it via this guide here:

How to Upgrade Debian 10 to Debian 11 | phoenixNAP KB

What other changes need to be made? Thanks.
--Keifer

Be careful, you can only ever upgrade to the next version!
From Debian 9 to 11 doesn't work. You have to do 2 upgrades.
From 9 to 10 first and later from 10 to 11.
You also cannot upgrade Windows 7 to Win 11 directly.

This is very time-consuming, hence the recommendation to reinstall.

No matter what you do, I would back up the tor config and the tor keys first.

Important: (apt-key is deprecated) How the tor repo is added has changed.

Again as a recommendation: Take the official Debian documentation and not any
random guides from the Internet. Here are the links again. The documentary is
translated into many languages. Chapters 2 and 4 are important.
Your architecture is: 64-Bit-PC (AMD64)

https://www.debian.org/releases/bullseye/releasenotes
https://www.debian.org/releases/bookworm//releasenotes

Your relay is running Tor 0.4.8.11 on Linux
That means you have time to read and ask questions.

I'm out of here for now.
I have enormous personal and legal problems because of the exits that I have
to take care of.

···

On Donnerstag, 9. Mai 2024 04:30:49 CEST Keifer Bly wrote:

On Wed, May 8, 2024 at 10:46 AM Keifer Bly <keifer.bly@gmail.com> wrote:
> Ok. So the vps I have is command line only, is there a way to update to
> debian 11 via the command line? Thanks.
>
> --Keifer
>
> On Wed, May 8, 2024, 1:22 AM Bauruine <torcontact@tuxli.ch> wrote:
>> Sorry I meant reinstall it with Bookworm of course. You can backup and
>> restore your keys if you like so you are not loosing your relays history.
>> There is some documentation at
>> Tor Project | Relay Post-install and good practices "Backup Tor
>> Identity Keys"
>> On 08.05.24 10:16, Bauruine wrote:
>>
>> What they told you, maybe a bit harsh, is that you are using a very old
>> Debian version that will soon be end of life and won't get updates
>> anymore.
>> apt-get upgrade doesn't upgrade to new releases, you have to do it
>> "manually". Think like a Windows 7 to Windows 10 upgrade which also
>> doesn't
>> happen with the normal Windows updates. You can either upgrade from your
>> current version Buster (10 )--> Bullseye (11) --> Bookworm (12) or just
>> reinstall it with Bullseye and configure it again.
>>
>> Bauruine
>> On 07.05.24 19:50, Keifer Bly wrote:
>>
>> Right? Why comment if your just going to be such a jerk and not be
>> helpful?
>>
>> I am just unable to figure why this would suddenly happen when the relay
>> has been updating without issue and suddenly this happens, have been
>> keeping Debian up to date using apt-get update so wondering what else
>> needs
>> to be done? Thanks.
>> --Keifer
>>
>>
>> On Mon, May 6, 2024 at 4:12 PM Micah Elizabeth Scott > >> <beth@torproject.org> > >> > >> wrote:
>>> On 5/6/24 3:19 PM, lists@for-privacy.net wrote:
>>> > Did you even only read 2 sentences from the link?
>>>
>>> Can we stop just accepting behavior like this on the tor community's
>>> mailing lists?
>>>
>>> Seriously, it makes us all look bad.
>>>
>>> I'm sorry folks have to endure so much just to use a computer program
>>> that's intended to be humane and helpful.
>>>
>>> --beth
>>> _______________________________________________
>>> tor-relays mailing list
>>> tor-relays@lists.torproject.org
>>> tor-relays Info Page
>>
>> _______________________________________________
>> tor-relays mailing
>> listtor-relays@lists.torproject.orghttps://lists.torproject.org/cgi-bin/
>> mailman/listinfo/tor-relays
>>
>>
>> _______________________________________________
>> tor-relays mailing
>> listtor-relays@lists.torproject.orghttps://lists.torproject.org/cgi-bin/
>> mailman/listinfo/tor-relays
>>
>> _______________________________________________
>> tor-relays mailing list
>> tor-relays@lists.torproject.org
>> tor-relays Info Page

--
╰_╯ Ciao Marco!

Debian GNU/Linux

It's free software and it gives you freedom!

Thanks, After checking with lsb_release -a, it is now running Debian 11.9. Is there a tool for auto updating tor when a new version is released?

Thanks.

···

–Keifer