mirror of
https://github.com/cmehay/docker-tor-hidden-service.git
synced 2025-04-19 05:19:10 +00:00
17be3e00d3
This copies the logic from last_tor_version.sh and last_torsocks_version.sh into the Dockerfile itself. The Tor version can still be specified with the `tor_version` and `torsocks_version` arguments, as before. If these arguments are missing, the last versions are determined by the regular expression. This has a couple of advantages: 1) Users need not have git, make or docker-compose installed to build the image. 2) Users can build the image entirely inside a container which reduces the trust needed in the safety of the build instructions. 3) `git tag` is much quicker than `git ls-remote` since it operates on local data.
68 lines
2.4 KiB
Docker
68 lines
2.4 KiB
Docker
FROM python:3.8-alpine
|
|
|
|
# if omitted, the versions are determined from the git tags
|
|
ARG tor_version
|
|
ARG torsocks_version
|
|
|
|
ENV HOME /var/lib/tor
|
|
ENV POETRY_VIRTUALENVS_CREATE=false
|
|
|
|
RUN apk add --no-cache git bind-tools libevent-dev openssl-dev gnupg gcc make automake ca-certificates autoconf musl-dev coreutils libffi-dev zlib-dev && \
|
|
mkdir -p /usr/local/src/ /var/lib/tor/ && \
|
|
git clone https://git.torproject.org/tor.git /usr/local/src/tor && \
|
|
cd /usr/local/src/tor && \
|
|
TOR_VERSION=${tor_version=$(git tag | grep -oE '[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$' | sort -V | tail -1)} && \
|
|
git checkout tor-$TOR_VERSION && \
|
|
./autogen.sh && \
|
|
./configure \
|
|
--disable-asciidoc \
|
|
--sysconfdir=/etc \
|
|
--disable-unittests && \
|
|
make && make install && \
|
|
cd .. && \
|
|
rm -rf tor && \
|
|
pip3 install --upgrade pip poetry && \
|
|
apk del git libevent-dev openssl-dev gnupg make automake autoconf musl-dev coreutils libffi-dev && \
|
|
apk add --no-cache libevent openssl
|
|
|
|
RUN apk add --no-cache git gcc make automake autoconf musl-dev libtool && \
|
|
git clone https://git.torproject.org/torsocks.git /usr/local/src/torsocks && \
|
|
cd /usr/local/src/torsocks && \
|
|
TORSOCKS_VERSION=${torsocks_version=$(git tag | grep -oE 'v[0-9]+\.[0-9]+\.[0-9]+$' | sort -V | tail -1)} && \
|
|
git checkout $TORSOCKS_VERSION && \
|
|
./autogen.sh && \
|
|
./configure && \
|
|
make && make install && \
|
|
cd .. && \
|
|
rm -rf torsocks && \
|
|
apk del git gcc make automake autoconf musl-dev libtool
|
|
|
|
RUN mkdir -p /etc/tor/
|
|
|
|
COPY pyproject.toml /usr/local/src/onions/
|
|
|
|
RUN cd /usr/local/src/onions && apk add --no-cache openssl-dev libffi-dev gcc libc-dev && \
|
|
poetry install --no-dev --no-root && \
|
|
apk del libffi-dev gcc libc-dev openssl-dev
|
|
|
|
COPY onions /usr/local/src/onions/onions
|
|
COPY poetry.lock /usr/local/src/onions/
|
|
RUN cd /usr/local/src/onions && apk add --no-cache gcc libc-dev && \
|
|
poetry install --no-dev && \
|
|
apk del gcc libc-dev
|
|
|
|
RUN mkdir -p ${HOME}/.tor && \
|
|
addgroup -S -g 107 tor && \
|
|
adduser -S -G tor -u 104 -H -h ${HOME} tor
|
|
|
|
COPY assets/entrypoint-config.yml /
|
|
COPY assets/torrc /var/local/tor/torrc.tpl
|
|
COPY assets/vanguards.conf.tpl /var/local/tor/vanguards.conf.tpl
|
|
|
|
ENV VANGUARDS_CONFIG /etc/tor/vanguards.conf
|
|
|
|
VOLUME ["/var/lib/tor/hidden_service/"]
|
|
|
|
ENTRYPOINT ["pyentrypoint"]
|
|
|
|
CMD ["tor"]
|