Yes, deb.torproject.org is also served via an Onion Service: http://apow7mjfryruh65chtdydfmqfpj5btws7nbocgtaovhvezgccyjazpqd.onion/

To use Apt over Tor, the apt transport needs to be installed:

sudo apt install apt-transport-tor -y

Then you need to add the repository:

For the stable version:

printf "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/tor-project-keyring.gpg] tor+http://apow7mjfryruh65chtdydfmqfpj5btws7nbocgtaovhvezgccyjazpqd.onion/torproject.org $(lsb_release -c) main" | sudo tee -a /etc/apt/sources.list.d/tor-project.list
printf "deb-src [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/tor-project-keyring.gpg] tor+http://apow7mjfryruh65chtdydfmqfpj5btws7nbocgtaovhvezgccyjazpqd.onion/torproject.org $(lsb_release -c) main" | sudo tee -a /etc/apt/sources.list.d/tor-project.list

For the experimental builds: printf "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/tor-project-keyring.gpg] tor+http://apow7mjfryruh65chtdydfmqfpj5btws7nbocgtaovhvezgccyjazpqd.onion/torproject.org tor-experimental-$(lsb_release -c) main" | sudo tee -a /etc/apt/sources.list.d/tor-project.list printf "deb-src [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/tor-project-keyring.gpg] tor+http://apow7mjfryruh65chtdydfmqfpj5btws7nbocgtaovhvezgccyjazpqd.onion/torproject.org tor-experimental-$(lsb_release -c) main" | sudo tee -a /etc/apt/sources.list.d/tor-project.list

For the nightly builds:

printf "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/tor-project-keyring.gpg] tor+http://apow7mjfryruh65chtdydfmqfpj5btws7nbocgtaovhvezgccyjazpqd.onion/torproject.org tor-nightly-main-$(lsb_release -c) main" | sudo tee -a /etc/apt/sources.list.d/tor-project.list printf "deb-src [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/tor-project-keyring.gpg] tor+http://apow7mjfryruh65chtdydfmqfpj5btws7nbocgtaovhvezgccyjazpqd.onion/torproject.org tor-nightly-main-$(lsb_release -c) main" | sudo tee -a /etc/apt/sources.list.d/tor-project.list

Since Debian 12 bookworm you can also use the more modern deb822-style:

echo -e "Types: deb deb-src\nComponents: main\nSuites: bookworm\nURIs: tor+http://apow7mjfryruh65chtdydfmqfpj5btws7nbocgtaovhvezgccyjazpqd.onion/torproject.org\nArchitectures: amd64 arm64 i386\nSigned-By: /usr/share/keyrings/tor-project-keyring.gpg" | sudo tee /etc/apt/sources.list.d/tor-project.sources ```