Skip to content
DepsiloDocs
GitHub

Configure APT

Point Debian or Ubuntu sources at Depsilo's /apt/ reverse proxy while keeping signature verification.

BEFOREhttps://deb.debian.org/debian
AFTERhttp://localhost:23333/apt/debian

Depsilo is an APT reverse proxy: replace repository URLs in your sources files instead of setting Acquire::http::Proxy. Depsilo passes signed repository content through unchanged, and APT still performs its normal GPG verification.

Configure Debian

Section titled “Configure Debian”

The example below targets Debian 13 “trixie”; replace the suite for other releases.

/etc/apt/sources.list.d/debian.sources
Types: deb
URIs: http://localhost:23333/apt/debian
Suites: trixie trixie-updates
Components: main
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg


Types: deb
URIs: http://localhost:23333/apt/debian-security
Suites: trixie-security
Components: main
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg

Configure Ubuntu

Section titled “Configure Ubuntu”

Ubuntu uses /apt/ubuntu with the matching codename:

/etc/apt/sources.list.d/ubuntu.sources
Types: deb
URIs: http://localhost:23333/apt/ubuntu
Suites: noble noble-updates noble-security
Components: main universe
Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg

Back up and edit existing sources by hand; do not run a cross-distribution sed -i.

Verify requests

Section titled “Verify requests”

  1. Refresh indexes

    终端窗口
    sudo apt update

  2. Check where packages now come from

    终端窗口
    apt-cache policy | head

  3. Confirm the traffic in Admin

    Check the /apt/ requests in Access logs; signed metadata such as InRelease is forwarded byte for byte.