Qubes Install Updates over Tor

From Whonix


To force all TemplateVM updates over Tor, [1] use salt in dom0.

sudo qubesctl state.sls qvm.updates-via-whonix

To undo this setting, modify /etc/qubes-rpc/policy/qubes.UpdatesProxy in dom0. [2] See also Qubes/UpdatesProxy.


To force dom0 updates over Tor, set Qubes' dom0 UpdateVM to sys-whonix. [3]

Qube ManagerSystemGlobal SettingsDom0 UpdateVM: sys-whonixOK

To revert this change, set Qubes' dom0 UpdateVM to sys-firewall or another preferred VM. [4]

Qubes ManagerSystemGlobal SettingsDom0 UpdateVM: sys-firewallOK

  1.!topic/qubes-users/_jI2uWPPMMA [archive]
  2. Or manually set the torified UpdateVM in dom0 terminal.
    qubes-prefs updatevm sys-whonix

  3. To revert this change in dom0 terminal, run.
    qubes-prefs updatevm sys-firewall