Tor Usage

[ghost]

Would be nice if it would be documented how to use

XferCommand = /usr/bin/pacman-bintrans -O %o %u --transparency-url https://pacman-bintrans.vulns.xyz/sigs/ --pubkey 'RWSC6c8TVaOYGoe60E+sPiPgumSQENiSNJrBOH6IUYdfmY9xIDJCFXa2'

with Tor - If even possible.

Thanks!

[kpcyrd]

This is partially possible, it's briefly documented in the README:

• --proxy 'socks5h://127.0.0.1:9050' sets a proxy to download transparency proofs and packages
• --bypass-proxy-for-pkgs if downloading packages through Tor is too slow you can use this option to download packages directly but still use Tor for transparency proofs

Note this only uses Tor for connections by pacman-bintrans itself, not for requests made by the rekor-cli child process. Theoretically you can also use torify so Tor is also used for the connection to the transparency log.

XferCommand = /usr/bin/torify pacman-bintrans -O %o %u --transparency-url https://pacman-bintrans.vulns.xyz/sigs/ --pubkey 'RWSC6c8TVaOYGoe60E+sPiPgumSQENiSNJrBOH6IUYdfmY9xIDJCFXa2'