Send APT Downloads Through a Proxy

Use an explicit HTTP proxy for APT repository requests, keep HTTPS verification enabled, and check host-specific direct exceptions.

APT has its own proxy options. Changing a browser's setting does not establish which route apt-get uses, and changing a repository mirror is not the same as selecting a proxy.

For one command, pass the settings explicitly:

sudo apt-get \
  -o Acquire::http::Proxy=http://203.0.113.10:8080/ \
  -o Acquire::https::Proxy=http://203.0.113.10:8080/ \
  update

Use your chosen HTTP endpoint from your service or the HTTP proxy list in place of the documentation IP. Both values can identify an ordinary HTTP proxy when it supports the required HTTPS tunnels. The names of the options describe the repository transport being configured.

For a connection you intend to keep

APT configuration can store the same values in a dedicated file under /etc/apt/apt.conf.d/:

Acquire::http::Proxy "http://203.0.113.10:8080/";
Acquire::https::Proxy "http://203.0.113.10:8080/";

Keep the syntax's quotes and semicolons. Using a separate, clearly named file makes it easier to remove your own override later without rewriting repository definitions or unrelated APT options.

To inspect a selected value without starting a package operation, use:

apt-config shell PROXY Acquire::http::Proxy

APT also supports http_proxy environment configuration, but the environment available through sudo may differ from the terminal in which you set it. Explicit APT options make a one-command comparison easier to follow.

A repository may deliberately go direct

A host-specific proxy option can use the special value DIRECT. If only one repository ignores the general proxy, inspect those host overrides before replacing the endpoint.

HTTPS certificate verification remains a separate check. Where an approved inspection CA is needed, configure appropriate trust; do not disable peer or hostname verification just to make the download advance. Package signatures also serve a different purpose from TLS and proxy routing.

Read more than the final command exit

Review which repository requests actually succeeded and whether APT reports fetch warnings or reused older lists. A partial update is not evidence that every source used the route successfully.

To undo a persistent test, remove only the proxy entries you added. Then check for remaining environment or host-specific settings, which may still select another proxy.

Allakkat attuumassuteqartut