fphammerle/docker-tor-proxy
1
0
Fork 0
mirror of https://github.com/fphammerle/docker-tor-proxy.git synced 2025-10-27 02:43:35 +01:00
Code Issues Packages Projects Releases Wiki Activity
227 Commits 2 Branches 68 Tags
dev
Commit Graph

97 Commits

Author SHA1 Message Date
dependabot[bot] b7f493099d build(deps): bump alpine from 3.15.4 to 3.16.0 
Bumps alpine from 3.15.4 to 3.16.0.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-05-27 08:03:05 +00:00
dependabot[bot] d821b911c3 build(deps): bump alpine from 3.15.3 to 3.15.4 
Bumps alpine from 3.15.3 to 3.15.4.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-04-08 08:05:14 +00:00
dependabot[bot] 9b8459e554 build(deps): bump alpine from 3.15.2 to 3.15.3 
Bumps alpine from 3.15.2 to 3.15.3.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-04-01 08:02:44 +00:00
dependabot[bot] 1bd44883d1 build(deps): bump alpine from 3.15.1 to 3.15.2 
Bumps alpine from 3.15.1 to 3.15.2.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-03-25 08:03:01 +00:00
dependabot[bot] 64be4f1754 build(deps): bump alpine from 3.15.0 to 3.15.1 
Bumps alpine from 3.15.0 to 3.15.1.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-03-18 18:49:17 +00:00
Fabian Peter Hammerle 4b287edbd4 upgrade tor package to v0.4.6.9-r0 (see below) 
https://web.archive.org/web/20211228082801/https://gitweb.torproject.org/tor.git/plain/ChangeLog
https://git.alpinelinux.org/aports/commit/community/tor?h=3.15-stable&id=cacb3a44facfe85ca04ca1868ecf0f0fbaeae190

https://github.com/fphammerle/docker-tor-obfs4-bridge/commit/127af8a9b1235120bba8dc40b609dc3bf20b4566
 2021-12-28 09:47:26 +01:00
Fabian Peter Hammerle 1eb9583069 upgrade tor package to v0.4.6.8-r0 (see below) 
https://web.archive.org/web/20211219210312/https://gitweb.torproject.org/tor.git/plain/ChangeLog
https://git.alpinelinux.org/aports/commit/community/tor?h=3.15-stable&id=178008f6bd3a8c810e17902277ffa30bb59933a1

https://github.com/fphammerle/docker-tor-obfs4-bridge/commit/f76e89e788260385778d0692741bfa23c9ec16ac
 2021-12-19 22:11:42 +01:00
Fabian Peter Hammerle 946bc9db19 upgrade alpine base image to v3.15.0 including upgrade of tor package from v0.4.5.10-r0 to v0.4.6.7-r1 and nftables package (see below) 
https://web.archive.org/web/20211204112320/https://gitweb.torproject.org/tor.git/plain/ChangeLog
https://git.alpinelinux.org/aports/commit/community/tor?h=3.15-stable&id=01351ec5162a1c190361b3799c63862a4c94d935
https://git.alpinelinux.org/aports/commit/community/tor?h=3.15-stable&id=7d4f77837c3a2f1cecfbfbe9224552b3614e3664
https://git.alpinelinux.org/aports/commit/community/tor?h=3.15-stable&id=8c36ff0a65aac9960da5cfce6694eedd8d869da6
https://git.alpinelinux.org/aports/commit/community/tor?h=3.15-stable&id=82d7315dd0e5b8d8fca73c175c95c280d24707b1

https://github.com/fphammerle/docker-tor-obfs4-bridge/commit/ebf4ab28c1c9a3b481334feff9826e2f0e2b5cc1

https://web.archive.org/web/20211204163111/https://lwn.net/Articles/866923/
https://web.archive.org/web/20211204162830/https://marc.info/?l=netfilter&m=163724233607275&w=2
https://git.alpinelinux.org/aports/commit/main/nftables?h=3.15-stable&id=e6af0bc07e922da5464d954686ffa1b144147289
https://git.alpinelinux.org/aports/commit/main/nftables?h=3.15-stable&id=bff049102a3177352d3caff2aa4aecf8a2993740
https://git.alpinelinux.org/aports/commit/main/nftables?h=3.15-stable&id=d69dc1a17026ff1844636db10fa77c7b546ac45a
 2021-12-04 17:25:28 +01:00
dependabot[bot] ce0fce96e0 build(deps): bump alpine from 3.14.3 to 3.15.0 
Bumps alpine from 3.14.3 to 3.15.0.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-11-26 08:02:54 +00:00
dependabot[bot] d7d5518a21 build(deps): bump alpine from 3.14.2 to 3.14.3 
Bumps alpine from 3.14.2 to 3.14.3.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-11-19 08:02:58 +00:00
Fabian Peter Hammerle b26c721e60 added ability to select exit nodes explicitly via EXIT_NODES env var 2021-09-05 16:22:00 +02:00
dependabot[bot] fc3f461cdd build(deps): bump alpine from 3.14.1 to 3.14.2 
Bumps alpine from 3.14.1 to 3.14.2.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-09-03 08:01:52 +00:00
Fabian Peter Hammerle 5a9d489a1d upgrade tor package from v0.4.5.9-r0 to v0.4.5.10-r0 (see links below) 
https://gitweb.torproject.org/tor.git/plain/ChangeLog
https://git.alpinelinux.org/aports/commit/community/tor?id=b2aec05acfa2bf2a191f41f24ed213f883e648e9
 2021-08-21 19:51:45 +02:00
dependabot[bot] db1f87c85c build(deps): bump alpine from 3.14.0 to 3.14.1 
Bumps alpine from 3.14.0 to 3.14.1.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-08-13 08:02:55 +00:00
Fabian Peter Hammerle 58fe2f7c03 added ability to exclude exit nodes via EXCLUDE_EXIT_NODES environment variable 2021-07-07 18:15:27 +02:00
Fabian Peter Hammerle 99b6bc5bff upgrade alpine base image from v3.13.5 to v3.14.0 including tor package upgrade from v0.4.4.9-r0 to v0.4.5.9-r0 (diff links below) 
https://gitweb.torproject.org/tor.git/plain/ChangeLog

https://git.alpinelinux.org/aports/commit/community/tor?id=6fd8dd11c3e025bd7eb8946158bddebfc4c5876a
https://git.alpinelinux.org/aports/commit/community/tor?id=f5832ba01e71545659a5f3f10330d5e42bdd16f3
https://git.alpinelinux.org/aports/commit/community/tor?id=8cc62f0ffbf3e4af479c12d0a214ea7d00814413
https://git.alpinelinux.org/aports/commit/community/tor?id=7170b8d4004b2185a70d0cfeed319fe02a3baea2
https://git.alpinelinux.org/aports/commit/community/tor?id=34d381f44e156b172854b542c7fcdbe40336293f
https://git.alpinelinux.org/aports/commit/community/tor?id=3e880d50ad912dc044bab412ea2b01d3192b855a

https://github.com/fphammerle/docker-onion-service/commit/4ff78b81909c1b0cf03fd6a6cb5e4480b6e8a27f

https://git.alpinelinux.org/aports/commit/main/nftables?id=60fa97f49b77e71347d1bd8bce92a69edde0aa66
https://git.alpinelinux.org/aports/commit/main/nftables?id=7d1e2f3541d57e1a4f347743e2a6abf63f510a13
https://git.alpinelinux.org/aports/commit/main/nftables?id=461d764f6a933295f84bdc4fb1a7642ac0857505
 2021-06-20 15:24:07 +02:00
dependabot[bot] a99aab74ab build(deps): bump alpine from 3.13.5 to 3.14.0 
Bumps alpine from 3.13.5 to 3.14.0.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-06-20 13:21:13 +00:00
Fabian Peter Hammerle 46e38ace3b upgrade tor package from v0.4.4.8-r0 to v0.4.4.9-r0 (see below) 
> Tor 0.4.4.9 fixes several security issues, [...]
https://gitweb.torproject.org/tor.git/plain/ChangeLog
https://git.alpinelinux.org/aports/commit/?h=3.13-stable&id=1a4d9c72ba358ec1eba313fde97e9a512527200b
 2021-06-20 15:18:23 +02:00
Fabian Peter Hammerle db9609494e add nft rule redirecting tcp traffic to transparent proxy 2021-04-30 12:35:15 +02:00
dependabot[bot] f05b6c3765 build(deps): bump alpine from 3.13.4 to 3.13.5 
Bumps alpine from 3.13.4 to 3.13.5.

Signed-off-by: dependabot[bot] <support@github.com>
 2021-04-16 05:45:24 +00:00
dependabot[bot] f301bd9968 build(deps): bump alpine from 3.13.3 to 3.13.4 
Bumps alpine from 3.13.3 to 3.13.4.

Signed-off-by: dependabot[bot] <support@github.com>
 2021-04-02 06:28:41 +00:00
Fabian Peter Hammerle 76f7fcaf09 upgrade alpine base image v3.12.2->v3.13.3 including upgrade of tor v0.4.4.7-r1->v0.4.4.8-r0 (see below) 
> One of these vulnerabilities (TROVE-2021-001) would allow an attacker
> who can send directory data to a Tor instance to force that Tor
> instance to consume huge amounts of CPU.
https://gitweb.torproject.org/tor.git/plain/ChangeLog

https://cve.circl.lu/cve/CVE-2021-28089

https://git.alpinelinux.org/aports/commit/community/tor?id=dc7ce7e4b63c64d11026e307ada830c33d8309a4

https://github.com/fphammerle/docker-onion-service/commit/48c53ae15c2780b3ac97ac55a91748e947a55ead
 2021-03-27 15:30:34 +01:00
dependabot[bot] 4e2545483d build(deps): bump alpine from 3.13.2 to 3.13.3 
Bumps alpine from 3.13.2 to 3.13.3.

Signed-off-by: dependabot[bot] <support@github.com>
 2021-03-26 06:19:03 +00:00
Fabian Peter Hammerle 677e9db8e2 added image labels org.opencontainers.image.title, .source & .revision 
https://github.com/fphammerle/docker-onion-service/commit/46ca6d70fb2d4570bfddac6b3f5e485183e72405
https://github.com/fphammerle/docker-onion-service/commit/aa124bde955047b2de6316ff72d6b1f76d14e3ba
 2021-03-03 14:08:29 +01:00
Fabian Peter Hammerle edac4ed3da upgrade alpine base image v3.13.1->3.13.2 including upgrade of tor package v0.4.4.6-r1->0.4.4.7-r1 (diff links below) 
https://git.alpinelinux.org/aports/commit/community/tor?id=3ff23770ebde5d5ce691e662d25ba01bd5020f3d
https://git.alpinelinux.org/aports/commit/community/tor?id=a9d54349aa5fec39e2d79c46838ce05904ca9bda
https://git.alpinelinux.org/aports/commit/community/tor?id=9ed5ece0dd0317f1976a1bb4729e911786d33af9

cherry-pick of https://github.com/fphammerle/docker-onion-service/commit/0599554fd6ae2ee3404dc63cec90730b14fa1fc2
 2021-02-19 13:13:56 +01:00
dependabot[bot] 5cc893c3c3 build(deps): bump alpine from 3.13.1 to 3.13.2 
Bumps alpine from 3.13.1 to 3.13.2.

Signed-off-by: dependabot[bot] <support@github.com>
 2021-02-19 06:10:22 +00:00
dependabot[bot] 4e2e1bbf4f build(deps): bump alpine from 3.13.0 to 3.13.1 
Bumps alpine from 3.13.0 to 3.13.1.

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-29 05:49:05 +00:00
Fabian Peter Hammerle 40b88ec7d5 upgrade alpine base image v3.12.3->v3.13.0 including upgrade of tor v0.4.3.7-r0->v0.4.4.6-r1 (diff links below) 
https://gitweb.torproject.org/tor.git/plain/ChangeLog

https://git.alpinelinux.org/aports/commit/community/tor?id=d181b0289ff7c32d371dcd976276672bbe2e7b72
https://git.alpinelinux.org/aports/commit/community/tor?id=9a0a0a5045901ab97ef455b54ffe19c91ca6993e
https://git.alpinelinux.org/aports/commit/community/tor?id=5edd132382384956e1787d4dcd5f1ffa9c520571
https://git.alpinelinux.org/aports/commit/community/tor?id=4ecb636d72d13db0f95f6e840e755bb260c91165
 2021-01-15 12:46:01 +01:00
dependabot[bot] 67c5c44495 build(deps): bump alpine from 3.12.3 to 3.13.0 
Bumps alpine from 3.12.3 to 3.13.0.

Signed-off-by: dependabot[bot] <support@github.com>
 2021-01-15 06:05:59 +00:00
Fabian Peter Hammerle dfe104eb09 healthcheck: replace dig with pre-installed nslookup 2021-01-01 16:38:41 +01:00
Fabian Peter Hammerle 6a9e7a1f42 healthcheck: restore dns request as network-liveness is too optimistic 
partial revert of commit 8d1a635ddc.
 2021-01-01 16:36:24 +01:00
Fabian Peter Hammerle 8d1a635ddc healthcheck: improve privacy by probing network-liveness instead of periodic http and dns requests 2021-01-01 13:59:50 +01:00
Fabian Peter Hammerle d573073454 upgrade tor v0.4.3.5 -> v0.4.3.7 (diff links below) 
https://gitweb.torproject.org/tor.git/plain/ChangeLog

https://git.alpinelinux.org/aports/commit/community/tor?id=3a247b9dbce3988d52b1a17a3d0bb5f1dc9b4863

removes support for zstd-compressed directory traffic from armhf builds:
https://git.alpinelinux.org/aports/commit/?id=2849fa38b9a76d1ef0a9df10aa70bafa00a5ab27

adds patches to curl for irrelevant CVE-2020-8286, CVE-2020-82850 & CVE-2020-8231
https://git.alpinelinux.org/aports/commit/?id=90e58b3d833e1a1e51c524cdaa5091dbcd80c0f0
https://git.alpinelinux.org/aports/commit/main/curl?id=52697341e47e456d2ee900a53c8ef65ce8a75c23
 2021-01-01 12:50:11 +01:00
Fabian Peter Hammerle 8cc0734979 create mount point at data dir /var/lib/tor to be able to make container's root filesystem read-only 
https://github.com/fphammerle/docker-tor-obfs4-bridge/commit/8d6514c2bda98488876f67116aa4c306a9dc28c2
https://github.com/fphammerle/docker-onion-service/commit/345840bda88620983bbf3d0f9a2975b561101ffc
 2020-10-03 17:24:55 +02:00
Fabian Peter Hammerle 97aca0c2c6 move tor's data directory to /var/lib/tor; run as user tor (uid=100) 
https://github.com/fphammerle/docker-tor-obfs4-bridge/commit/8d6514c2bda98488876f67116aa4c306a9dc28c2
https://github.com/fphammerle/docker-onion-service/commit/345840bda88620983bbf3d0f9a2975b561101ffc
 2020-10-03 10:52:34 +02:00
Fabian Peter Hammerle 7fb3c50db6 upgrade curl default package version 2020-09-27 08:53:39 +02:00
Fabian Peter Hammerle ef97bc410f healthcheck: remove circuit-established check via control port to avoid spamming container log 
> [notice] New control connection opened from 127.0.0.1.
 2020-09-26 22:56:19 +02:00
Fabian Peter Hammerle a4f7946ced enable control listener 2020-09-26 22:52:13 +02:00
Fabian Peter Hammerle dcb78b66c5 upgrade default tor version: 0.4.1.9 -> 0.4.3.5 2020-09-26 21:56:41 +02:00
Fabian Peter Hammerle 95b977d216 run tor as unprivileged user; DNS port 53 -> 9053 (breaking) 
> [warn] You are running Tor as root. You don't need to, and you probably shouldn't.
 2020-03-24 20:08:49 +01:00
Fabian Peter Hammerle 60bad462e4 change SocksTimeout by setting $SOCKS_TIMEOUT_SECONDS 2020-03-21 21:00:07 +01:00
Fabian Peter Hammerle 140ebf8e2e upgrade tor v0.4.1.7->0.4.1.9 (fixes CVE-2020-10592 & CVE-2020-10593) 2020-03-21 20:19:47 +01:00
Fabian Peter Hammerle d6f5c7c769 upgrade alpine 3.10->3.11 to upgrade tor 0.4.1.6->0.4.1.7 2020-02-22 11:07:00 +01:00
Fabian Peter Hammerle 0488f0b019 onion service -> tor socks & dns proxy 2019-10-12 10:08:52 +02:00
Fabian Peter Hammerle e3fb171bd4 split COPY --chown in COPY & RUN chmod to increase backward compatibility 2019-01-04 08:53:11 +01:00
Fabian Peter Hammerle b0d1116368 set onion svc version via $VERSION, default: v3 2019-01-03 22:37:07 +01:00
Fabian Peter Hammerle 33cde65440 single onion service $VIRTUAL_PORT -> $TARGET 2018-12-27 01:09:36 +01:00