apt

Primary endpoint

Use https://mirror.kargadan.ir/repository/kali-proxy/ as the canonical baseurl in your client configuration.

1 archive

Primary archive only

A single proxy serves the entire distribution — no companion archives needed.

Anonymous

No sign-in required

Public read access over HTTPS. Plain HTTP is available for legacy clients that cannot validate the certificate.

Repository URL

Drop one of the URLs below into your client configuration. HTTPS is the right choice in almost every case.

HTTPS · recommended
https://mirror.kargadan.ir/repository/kali-proxy/
HTTP · legacy clients only
http://mirror.kargadan.ir/repository/kali-proxy/

Quick verification

Run this from any machine that can reach the mirror. It should complete in under a second once metadata is cached.

# Quick smoke test
curl -fsSL https://mirror.kargadan.ir/repository/kali-proxy/dists/kali-rolling/Release | head -10

Default client configuration

Drop this file at /etc/apt/sources.list on the target host for the recommended default release (kali-rolling). See configuration by release for every supported suite.

# /etc/apt/sources.list.d/kali.list  (Kali Linux rolling)
# Replace the contents of /etc/apt/sources.list with this single line.

deb [trusted=yes] https://mirror.kargadan.ir/repository/kali-proxy kali-rolling main contrib non-free non-free-firmware

# The kali-archive-keyring package keeps providing GPG verification because
# Nexus proxies the upstream Release.gpg unchanged.

Configuration by release

Each block below is a complete, copy-ready configuration for one suite or release. Install path: /etc/apt/sources.list. The same patterns are committed under /opt/client-configs/kali/kali.list on the mirror host (default release only).

Kali Linux rolling default rolling

Quick verification

curl -fsSL https://mirror.kargadan.ir/repository/kali-proxy/dists/kali-rolling/Release | head -10

Client configuration

# /etc/apt/sources.list.d/kali.list  (Kali Linux rolling)

deb [trusted=yes] https://mirror.kargadan.ir/repository/kali-proxy kali-rolling main contrib non-free non-free-firmware

Kali dev branch

Quick verification

curl -fsSL https://mirror.kargadan.ir/repository/kali-proxy/dists/kali-dev/Release | head -10

Client configuration

# /etc/apt/sources.list.d/kali.list  (Kali dev branch)

deb [trusted=yes] https://mirror.kargadan.ir/repository/kali-proxy kali-dev main contrib non-free non-free-firmware

Kali experimental

Quick verification

curl -fsSL https://mirror.kargadan.ir/repository/kali-proxy/dists/kali-experimental/Release | head -10

Client configuration

# /etc/apt/sources.list.d/kali.list  (Kali experimental)

deb [trusted=yes] https://mirror.kargadan.ir/repository/kali-proxy kali-experimental main contrib non-free non-free-firmware

CI / container example

A minimal snippet you can paste into a Dockerfile or pipeline step.

# Dockerfile snippet
FROM kali:kali-rolling
RUN echo 'deb [trusted=yes] https://mirror.kargadan.ir/repository/kali-proxy kali-rolling main' \
    > /etc/apt/sources.list \
 && apt-get update && apt-get install -y --no-install-recommends ca-certificates

Mirror information

DistributionKali Linux
Package managerapt
Mirror format (Nexus)apt
Default suite / branchkali-rolling
AuthenticationNot required (anonymous read)
ProtocolsHTTPS · HTTP
Notes & limitations

kali-archive-keyring still validates upstream signing because Nexus passes Release.gpg through unchanged.