Skip to content

Instantly share code, notes, and snippets.

@deeplow
Last active July 8, 2025 12:13
Show Gist options
  • Select an option

  • Save deeplow/6f196165f0f8968e6c8951c11435e3c6 to your computer and use it in GitHub Desktop.

Select an option

Save deeplow/6f196165f0f8968e6c8951c11435e3c6 to your computer and use it in GitHub Desktop.
Split-tor via qubes.ConnectTCP

qubes needed:

  • sd-tor (networked app qube) - where tor client runs
  • sd-proxy (vault app qube or disposable) - where sd proxy runs

Instructions:

  1. sd-tor Start arti proxy tor and (optinally) setup authenticated onion address credentials
  2. dom0: Create a new RPC policy with
qubes.ConnectTCP +9150	sd-proxy	@default	allow 	target=@sd-tor
  1. sd-proxy:
  • connect setup the proxy with
    qvm-connect-tcp 9150:@default:9150
    
  • Curl just fine in an otherwire offline virtual machine
    curl —socks5-hostname localhost:9150 http://<onion_address>.onion
    
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment