It's possible use IPs instead of URLs for the repositories in sources.list?
(And how)
13
- 3It's wrong. Don't do it. URLs won't always point to the same IP address.waltinator– waltinator2020-12-20 05:03:35 +00:00Commented Dec 20, 2020 at 5:03
- can be useful to avoid DNS hackuser406126– user4061262020-12-20 06:01:26 +00:00Commented Dec 20, 2020 at 6:01
- 1Doesn't matter. Even if you get a MITM attack from DNS, the repositories, including package file checksum, are signed with a GPG key. This can't lead to apt-get installing a fake package.A.B– A.B2020-12-20 16:58:43 +00:00Commented Dec 20, 2020 at 16:58
- 1It was installed when the OS was installed, and then kept up to date. For Debian, explanations there: wiki.debian.org/SecureAptA.B– A.B2020-12-20 17:01:52 +00:00Commented Dec 20, 2020 at 17:01
- 1Looks like this question is a big XY problem anyway.A.B– A.B2020-12-20 17:09:41 +00:00Commented Dec 20, 2020 at 17:09
| Show 8 more comments
1 Answer
You can use an IP instead of an url in your sources.list.
here is an example: To convert deb http://deb.debian.org/debian buster main, you need to get the ip of the url, but in this case it is a redirector! . The right URL to convert is the url of the debian mirror e,g: ftp2.de.debian.org/debian/
nslookup ftp2.de.debian.org Use dig, nslookup ... to get the IP address
sample output:
... Non-authoritative answer: ftp2.de.debian.org canonical name = ftp.halifax.rwth-aachen.de. Name: ftp.halifax.rwth-aachen.de Address: 137.226.34.46 Name: ftp.halifax.rwth-aachen.de Address: 2a00:8a60:e012:a00::21 then edit your /etc/apt/sources.list as follows:
deb http://137.226.34.46/debian buster main The debian security repository:
deb http://20.49.228.237/debian-security/ buster/updates main 
- thx for answer. Know how get the mirror for security updates? "security.debian.org"user406126– user4061262020-12-20 16:39:31 +00:00Commented Dec 20, 2020 at 16:39
- it says "does not have a Release file"user406126– user4061262020-12-20 16:47:16 +00:00Commented Dec 20, 2020 at 16:47
- @user406126 I have edited my answer.GAD3R– GAD3R2020-12-20 17:19:22 +00:00Commented Dec 20, 2020 at 17:19
- 1that security IP pertains to Microsoft, not Debian foundation. There's any source where can lookup the mirrors myself?user406126– user4061262020-12-20 17:26:25 +00:00Commented Dec 20, 2020 at 17:26