I want to add SOCKS proxy settings to /etc/apt/apt.conf. What is the syntax for it? Is it same as http and ftp syntax?
Thanks.
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It only takes a minute to sign up.
Sign up to join this communityAcquire::http::proxy "socks5h://server:port";
This works for me on Ubuntu 18.04. As the man page says, socks5h, not socks5, is supported by apt, which means socks5 proxy with DNS resolving ability.
Acquire::https::proxy "socks5h://server:port";
to a apt.conf.d
file (like /etc/apt/apt.conf.d/12proxy
) works just fine. I would suggest to stick to https unless otherwise is necessary.
May 9, 2019 at 6:35
Acquire::http::proxy "socks5h://user:pass@server:port";
. The above rule works just fine in Ubuntu 18.04. Here socks5h
enforces DNS resolution at the proxy server.
May 9, 2019 at 6:44
A possible solution can be to use tsocks
, an application that can redirect the network traffic through a socks proxy.
Install tsocks
package, modify /etc/tsocks.conf
to set address and port number of your socks proxy, and run:
$ sudo -s
# tsocks apt-get update
# tsocks apt-get dist-upgrade
# exit
$
or
$ sudo -s
# . tsocks -on
# apt-get update
# apt-get dist-upgrade
# . tsocks -off # not really necessary, given the exit
# exit
$
You can think to a number of options, to simplify and automate its use.
Don't forget the leading dot, the Manpage has more deatails on this.
Edit: a shorter way to use it:
$ sudo tsocks apt-get update
$ sudo tsocks apt-get dist-upgrade
sudo tsocks apt-get install tsocks
. Hahahahahaha...
Acquire::http::Proxy "socks5h://hostname:port/"
. See the changelog at anonscm.debian.org/gitweb/?p=apt/apt.git;a=blob;f=debian/…
apt-get something
!
Jul 5, 2017 at 17:48
Acquire::socks::Proxy "socks5h://hostname:port/";
does the trick. Http does not - try it with Tor and you'll see a standard response "Tor is not a http proxy", so the http
goes replaced by socks
- and it works!
Aug 20, 2017 at 11:30
Using the next config line works for me:
Acquire::socks::proxy "socks5://server:port";
To keep apt.conf
clean and avoid problems at Linux upgrade I created a new file (/etc/apt/apt.conf.d/12proxy
) and added the config file to it.
I couldn't find anything on Acquire::socks::proxy in the apt.conf manual of Ubuntu Xenial. You could fix this by running a local http proxy that supports upstream socks proxy, for example Polipo. You need to configure Polipo as follows:
proxyAddress = "::1"
proxyPort = 8118
socksParentProxy = "sockshost:socksport"
socksProxyType = socks5
and then set the http proxy in your apt.conf file:
Acquire::http::proxy "http://127.0.0.1:8118/";
Acquire::https::proxy "https://127.0.0.1:8118/";
Or tou can put in your /etc/apt/apt.conf something like this:
Acquire::socks::proxy "socks://user:pass@host:port/";
Acquire::http::proxy "socks://user:pass@host:port/";
Jul 18, 2014 at 16:03
Acquire::socks
is for setting the proxy for URLs that start with socks://
. So that means you don't need a proxy to access the internet, and apt
is not using any proxy for ftp://
, http://
, or https://
.. apt
only supports HTTP proxies, i.e. Acquire::http::proxy "http://localhost:8118
.
Sep 8, 2015 at 19:38
In Debian, you can read the manpage apt-transport-http(1)
and look for supported URI schemes. As was answered before, put
Acquire::http::proxy "socks5h://server:port";
in
/etc/apt/apt.conf.d/12proxy
You can read more about the APT-config in general in apt.conf(5)
and read the examples in /usr/share/doc/apt/examples/configure-index.gz
mentioned at the end of the manpage.
This can be combined with ssh -D <LOCAL PORT> <USER>@<HOST>
to create a SOCKS proxy to a different system so that apt can then use the proxy as if everything originated on <HOST>
.
If you use ssh -D 0.0.0.0:<LOCAL PORT> <USER>@<HOST>
or ssh -D [::]:<LOCAL PORT> <USER>@<HOST>
(for IPv6) to enable other systems to use the SOCKS proxy on all interfaces. This can be a security risk or breach of (corporate) policy. Make sure you know what you are doing.