Debian Mirror Iran — apt mirror

apt

Primary endpoint

Use https://mirror.kargadan.ir/repository/debian-proxy/ as the canonical baseurl in your client configuration.

3 archives

Companion archives included

Primary archive plus 2 companion archives (security · updates · backports — listed below).

Anonymous

No sign-in required

Public read access over HTTPS. Plain HTTP is available for legacy clients that cannot validate the certificate.

Repository URL

Drop one of the URLs below into your client configuration. HTTPS is the right choice in almost every case.

HTTPS · recommended

https://mirror.kargadan.ir/repository/debian-proxy/

HTTP · legacy clients only

http://mirror.kargadan.ir/repository/debian-proxy/

Companion repositories

This distribution requires more than one archive — list each one below in your client configuration.

Name	URL
`debian-security-proxy`	`https://mirror.kargadan.ir/repository/debian-security-proxy/`
`debian-backports-proxy`	`https://mirror.kargadan.ir/repository/debian-backports-proxy/`

Each archive (main, security, backports) has its own proxy because Nexus 3 OSS does not provide an apt-group format. Adjust the suite name on the deb lines to switch between Debian releases.

Quick verification

Run this from any machine that can reach the mirror. It should complete in under a second once metadata is cached.

# Quick smoke test
curl -fsSL https://mirror.kargadan.ir/repository/debian-proxy/dists/bookworm/Release | head -10

Default client configuration

Drop this file at /etc/apt/sources.list on the target host for the recommended default release (bookworm). See configuration by release for every supported suite.

# /etc/apt/sources.list  (Debian 12 "bookworm" via Kargadan Mirror)
# Replaces the upstream deb.debian.org / security.debian.org with the cached
# Nexus proxies. Each archive is its own apt proxy because Nexus 3 OSS does not
# support apt group repositories.

deb [trusted=yes] https://mirror.kargadan.ir/repository/debian-proxy            bookworm           main contrib non-free non-free-firmware
deb [trusted=yes] https://mirror.kargadan.ir/repository/debian-security-proxy  bookworm-security  main contrib non-free non-free-firmware
deb [trusted=yes] https://mirror.kargadan.ir/repository/debian-backports-proxy bookworm-backports main contrib non-free non-free-firmware

# Notes:
#  * The deb.debian.org distributor key is automatically trusted because
#    Nexus passes the upstream Release.gpg untouched. `trusted=yes` is here
#    only for environments missing the debian-archive-keyring package.
#  * For older Debian releases (bullseye, buster) point at the same
#    debian-proxy and replace the suite name; Nexus proxies all dists/<X>.

Configuration by release

Each block below is a complete, copy-ready configuration for one suite or release. Install path: /etc/apt/sources.list. The same patterns are committed under /opt/client-configs/debian/sources.list on the mirror host (default release only).

Debian 12 "bookworm" default stable

Quick verification

curl -fsSL https://mirror.kargadan.ir/repository/debian-proxy/dists/bookworm/Release | head -10

Client configuration

# /etc/apt/sources.list  (Debian 12 "bookworm" via Kargadan Mirror)
# Each archive uses its own Nexus apt proxy (OSS has no apt groups).

deb [trusted=yes] https://mirror.kargadan.ir/repository/debian-proxy            bookworm           main contrib non-free non-free-firmware
deb [trusted=yes] https://mirror.kargadan.ir/repository/debian-security-proxy  bookworm-security  main contrib non-free non-free-firmware
deb [trusted=yes] https://mirror.kargadan.ir/repository/debian-backports-proxy bookworm-backports main contrib non-free non-free-firmware

CI / container

# Dockerfile
FROM debian:bookworm
RUN printf 'deb [trusted=yes] https://mirror.kargadan.ir/repository/debian-proxy bookworm main\n' > /etc/apt/sources.list \
 && apt-get update && apt-get install -y --no-install-recommends ca-certificates

Debian 11 "bullseye" oldstable

Quick verification

curl -fsSL https://mirror.kargadan.ir/repository/debian-proxy/dists/bullseye/Release | head -10

Client configuration

# /etc/apt/sources.list  (Debian 11 "bullseye" via Kargadan Mirror)
# Each archive uses its own Nexus apt proxy (OSS has no apt groups).

deb [trusted=yes] https://mirror.kargadan.ir/repository/debian-proxy            bullseye           main contrib non-free
deb [trusted=yes] https://mirror.kargadan.ir/repository/debian-security-proxy  bullseye-security  main contrib non-free
deb [trusted=yes] https://mirror.kargadan.ir/repository/debian-backports-proxy bullseye-backports main contrib non-free

CI / container

# Dockerfile
FROM debian:bullseye
RUN printf 'deb [trusted=yes] https://mirror.kargadan.ir/repository/debian-proxy bullseye main\n' > /etc/apt/sources.list \
 && apt-get update && apt-get install -y --no-install-recommends ca-certificates

Debian stable (rolling symlink) alias

The stable suite tracks the current Debian stable release (currently bookworm). You may use either stable or bookworm as the suite name.

Quick verification

curl -fsSL https://mirror.kargadan.ir/repository/debian-proxy/dists/stable/Release | head -10

Client configuration

# /etc/apt/sources.list  (Debian stable (rolling symlink) via Kargadan Mirror)
# Each archive uses its own Nexus apt proxy (OSS has no apt groups).

deb [trusted=yes] https://mirror.kargadan.ir/repository/debian-proxy            stable             main contrib non-free non-free-firmware
deb [trusted=yes] https://mirror.kargadan.ir/repository/debian-security-proxy  stable-security    main contrib non-free non-free-firmware
deb [trusted=yes] https://mirror.kargadan.ir/repository/debian-backports-proxy stable-backports  main contrib non-free non-free-firmware

CI / container

# Dockerfile
FROM debian:bookworm
RUN printf 'deb [trusted=yes] https://mirror.kargadan.ir/repository/debian-proxy stable main\n' > /etc/apt/sources.list \
 && apt-get update && apt-get install -y --no-install-recommends ca-certificates

Debian 13 "trixie" (testing) testing

Quick verification

curl -fsSL https://mirror.kargadan.ir/repository/debian-proxy/dists/trixie/Release | head -10

Client configuration

# /etc/apt/sources.list  (Debian 13 "trixie" (testing) via Kargadan Mirror)
# Each archive uses its own Nexus apt proxy (OSS has no apt groups).

deb [trusted=yes] https://mirror.kargadan.ir/repository/debian-proxy            trixie             main contrib non-free non-free-firmware
deb [trusted=yes] https://mirror.kargadan.ir/repository/debian-security-proxy  trixie-security    main contrib non-free non-free-firmware
deb [trusted=yes] https://mirror.kargadan.ir/repository/debian-backports-proxy trixie-backports  main contrib non-free non-free-firmware

CI / container

# Dockerfile
FROM debian:trixie
RUN printf 'deb [trusted=yes] https://mirror.kargadan.ir/repository/debian-proxy trixie main\n' > /etc/apt/sources.list \
 && apt-get update && apt-get install -y --no-install-recommends ca-certificates

CI / container example

A minimal snippet you can paste into a Dockerfile or pipeline step.

# Dockerfile snippet
FROM debian:bookworm
RUN echo 'deb [trusted=yes] https://mirror.kargadan.ir/repository/debian-proxy bookworm main' \
    > /etc/apt/sources.list \
 && apt-get update && apt-get install -y --no-install-recommends ca-certificates

Mirror information

Distribution	Debian
Package manager	`apt`
Mirror format (Nexus)	apt
Default suite / branch	`bookworm`
Authentication	Not required (anonymous read)
Protocols	HTTPS · HTTP

Notes & limitations

Each archive (main, security, backports) has its own proxy because Nexus 3 OSS does not provide an apt-group format. Adjust the suite name on the deb lines to switch between Debian releases.