Primary endpoint
Use https://mirror.kargadan.ir/repository/kali-proxy/ as the canonical baseurl in your client configuration.
apt mirror for Kali Linux rolling — single archive, single deb line.
Use https://mirror.kargadan.ir/repository/kali-proxy/ as the canonical baseurl in your client configuration.
A single proxy serves the entire distribution — no companion archives needed.
Public read access over HTTPS. Plain HTTP is available for legacy clients that cannot validate the certificate.
Drop one of the URLs below into your client configuration. HTTPS is the right choice in almost every case.
Run this from any machine that can reach the mirror. It should complete in under a second once metadata is cached.
# Quick smoke test
curl -fsSL https://mirror.kargadan.ir/repository/kali-proxy/dists/kali-rolling/Release | head -10
Drop this file at /etc/apt/sources.list on the target host for the recommended default release (kali-rolling). See configuration by release for every supported suite.
# /etc/apt/sources.list.d/kali.list (Kali Linux rolling)
# Replace the contents of /etc/apt/sources.list with this single line.
deb [trusted=yes] https://mirror.kargadan.ir/repository/kali-proxy kali-rolling main contrib non-free non-free-firmware
# The kali-archive-keyring package keeps providing GPG verification because
# Nexus proxies the upstream Release.gpg unchanged.
Each block below is a complete, copy-ready configuration for one suite or release. Install path: /etc/apt/sources.list. The same patterns are committed under /opt/client-configs/kali/kali.list on the mirror host (default release only).
curl -fsSL https://mirror.kargadan.ir/repository/kali-proxy/dists/kali-rolling/Release | head -10# /etc/apt/sources.list.d/kali.list (Kali Linux rolling)
deb [trusted=yes] https://mirror.kargadan.ir/repository/kali-proxy kali-rolling main contrib non-free non-free-firmwarecurl -fsSL https://mirror.kargadan.ir/repository/kali-proxy/dists/kali-dev/Release | head -10# /etc/apt/sources.list.d/kali.list (Kali dev branch)
deb [trusted=yes] https://mirror.kargadan.ir/repository/kali-proxy kali-dev main contrib non-free non-free-firmwarecurl -fsSL https://mirror.kargadan.ir/repository/kali-proxy/dists/kali-experimental/Release | head -10# /etc/apt/sources.list.d/kali.list (Kali experimental)
deb [trusted=yes] https://mirror.kargadan.ir/repository/kali-proxy kali-experimental main contrib non-free non-free-firmwareA minimal snippet you can paste into a Dockerfile or pipeline step.
# Dockerfile snippet
FROM kali:kali-rolling
RUN echo 'deb [trusted=yes] https://mirror.kargadan.ir/repository/kali-proxy kali-rolling main' \
> /etc/apt/sources.list \
&& apt-get update && apt-get install -y --no-install-recommends ca-certificates
| Distribution | Kali Linux |
| Package manager | apt |
| Mirror format (Nexus) | apt |
| Default suite / branch | kali-rolling |
| Authentication | Not required (anonymous read) |
| Protocols | HTTPS · HTTP |
kali-archive-keyring still validates upstream signing because Nexus passes Release.gpg through unchanged.