Commit Graph

83 Commits

Author SHA1 Message Date
dependabot[bot] 0cf3a5f284 build(deps): bump docker/setup-buildx-action from 1.5.0 to 1.5.1
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 1.5.0 to 1.5.1.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v1.5.0...v1.5.1)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-07-16 08:06:36 +00:00
dependabot[bot] 2cb4dfeb05 build(deps): bump docker/setup-buildx-action from 1.4.1 to 1.5.0
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 1.4.1 to 1.5.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v1.4.1...v1.5.0)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-07-09 08:03:58 +00:00
Fabian Peter Hammerle e3d69cb61c release v4.4.0 docker/4.4.0-tor0.4.5.9r0-armv7 docker/4.4.0-tor0.4.5.9r0-amd64 v4.4.0 2021-07-07 18:28:12 +02:00
Fabian Peter Hammerle 58fe2f7c03 added ability to exclude exit nodes via EXCLUDE_EXIT_NODES environment variable 2021-07-07 18:15:27 +02:00
dependabot[bot] e17905a023 build(deps): bump docker/build-push-action from 2.5.0 to 2.6.1
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 2.5.0 to 2.6.1.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v2.5.0...v2.6.1)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-07-02 08:27:35 +00:00
dependabot[bot] dfb3bce8c7 build(deps): bump docker/setup-buildx-action from 1.3.0 to 1.4.1
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 1.3.0 to 1.4.1.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v1.3.0...v1.4.1)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-07-02 08:04:24 +00:00
Fabian Peter Hammerle 99b6bc5bff upgrade alpine base image from v3.13.5 to v3.14.0 including tor package upgrade from v0.4.4.9-r0 to v0.4.5.9-r0 (diff links below)
https://gitweb.torproject.org/tor.git/plain/ChangeLog

https://git.alpinelinux.org/aports/commit/community/tor?id=6fd8dd11c3e025bd7eb8946158bddebfc4c5876a
https://git.alpinelinux.org/aports/commit/community/tor?id=f5832ba01e71545659a5f3f10330d5e42bdd16f3
https://git.alpinelinux.org/aports/commit/community/tor?id=8cc62f0ffbf3e4af479c12d0a214ea7d00814413
https://git.alpinelinux.org/aports/commit/community/tor?id=7170b8d4004b2185a70d0cfeed319fe02a3baea2
https://git.alpinelinux.org/aports/commit/community/tor?id=34d381f44e156b172854b542c7fcdbe40336293f
https://git.alpinelinux.org/aports/commit/community/tor?id=3e880d50ad912dc044bab412ea2b01d3192b855a

https://github.com/fphammerle/docker-onion-service/commit/4ff78b81909c1b0cf03fd6a6cb5e4480b6e8a27f

https://git.alpinelinux.org/aports/commit/main/nftables?id=60fa97f49b77e71347d1bd8bce92a69edde0aa66
https://git.alpinelinux.org/aports/commit/main/nftables?id=7d1e2f3541d57e1a4f347743e2a6abf63f510a13
https://git.alpinelinux.org/aports/commit/main/nftables?id=461d764f6a933295f84bdc4fb1a7642ac0857505
docker/4.3.1-tor0.4.5.9r0-armv7 docker/4.3.1-tor0.4.5.9r0-amd64
2021-06-20 15:24:07 +02:00
dependabot[bot] a99aab74ab build(deps): bump alpine from 3.13.5 to 3.14.0
Bumps alpine from 3.13.5 to 3.14.0.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-20 13:21:13 +00:00
Fabian Peter Hammerle 3900d94aa4 configure dependabot to keep github-actions up-to-date
https://github.com/fphammerle/docker-onion-service/commit/16856af330263d1331895212ae2e6927a35159a4
https://github.com/fphammerle/ical2vdir/commit/76d3b61c128fe1cad322e52d5877cc919a533ac4
2021-06-20 15:19:46 +02:00
Fabian Peter Hammerle 958016fd7c setup github action verifying docker build succeeds (to replace docker's autobuild service)
> Docker’s Autobuild service has been targeted by the same bad actors,
> so today we are disappointed to announce that
> we will be discontinuing Autobuilds on the free tier starting from June 18, 2021.
https://www.docker.com/blog/changes-to-docker-hub-autobuilds/

https://github.com/fphammerle/docker-onion-service/commit/d774f5131cf948ed90e81f96c14f842ff72d880d
https://github.com/fphammerle/switchbot-mqtt/commit/d7b875458d6e11505fb305ecb9f1f40bb5720a21
2021-06-20 15:19:26 +02:00
Fabian Peter Hammerle 46e38ace3b upgrade tor package from v0.4.4.8-r0 to v0.4.4.9-r0 (see below)
> Tor 0.4.4.9 fixes several security issues, [...]
https://gitweb.torproject.org/tor.git/plain/ChangeLog
https://git.alpinelinux.org/aports/commit/?h=3.13-stable&id=1a4d9c72ba358ec1eba313fde97e9a512527200b
2021-06-20 15:18:23 +02:00
Fabian Peter Hammerle 0cd4a1b854 release v4.3.1 docker/4.3.1-tor0.4.4.8r0-armv7 docker/4.3.1-tor0.4.4.8r0-amd64 v4.3.1 2021-05-15 22:54:38 +02:00
Fabian Peter Hammerle 55b6ed7889 entrypoint: create prerouting chain if not already created by container runtime 2021-05-15 22:52:16 +02:00
Fabian Peter Hammerle 1eba286ed7 release v4.3.0 docker/4.3.0-tor0.4.4.8r0-amd64 v4.3.0 2021-05-07 13:22:04 +02:00
Fabian Peter Hammerle a75b7aebae add nft rule forwarding udp dns requests to tor 2021-05-07 00:08:52 +02:00
Fabian Peter Hammerle 6b811fe5c6 release v4.2.0 docker/4.2.0-tor0.4.4.8r0-armv7 docker/4.2.0-tor0.4.4.8r0-amd64 v4.2.0 2021-04-30 12:50:31 +02:00
Fabian Peter Hammerle db9609494e add nft rule redirecting tcp traffic to transparent proxy 2021-04-30 12:35:15 +02:00
dependabot[bot] f05b6c3765 build(deps): bump alpine from 3.13.4 to 3.13.5
Bumps alpine from 3.13.4 to 3.13.5.

Signed-off-by: dependabot[bot] <support@github.com>
2021-04-16 05:45:24 +00:00
dependabot[bot] f301bd9968 build(deps): bump alpine from 3.13.3 to 3.13.4
Bumps alpine from 3.13.3 to 3.13.4.

Signed-off-by: dependabot[bot] <support@github.com>
docker/4.1.0-tor0.4.4.8r0-arm64 docker/4.1.0-tor0.4.4.8r0-armv7
2021-04-02 06:28:41 +00:00
Fabian Peter Hammerle 76f7fcaf09 upgrade alpine base image v3.12.2->v3.13.3 including upgrade of tor v0.4.4.7-r1->v0.4.4.8-r0 (see below)
> One of these vulnerabilities (TROVE-2021-001) would allow an attacker
> who can send directory data to a Tor instance to force that Tor
> instance to consume huge amounts of CPU.
https://gitweb.torproject.org/tor.git/plain/ChangeLog

https://cve.circl.lu/cve/CVE-2021-28089

https://git.alpinelinux.org/aports/commit/community/tor?id=dc7ce7e4b63c64d11026e307ada830c33d8309a4

https://github.com/fphammerle/docker-onion-service/commit/48c53ae15c2780b3ac97ac55a91748e947a55ead
docker/4.1.0-tor0.4.4.8r0-amd64
2021-03-27 15:30:34 +01:00
dependabot[bot] 4e2545483d build(deps): bump alpine from 3.13.2 to 3.13.3
Bumps alpine from 3.13.2 to 3.13.3.

Signed-off-by: dependabot[bot] <support@github.com>
2021-03-26 06:19:03 +00:00
Fabian Peter Hammerle f9f3095cba readme: simplify control port commands (no longer invoke shell) 2021-03-03 18:57:41 +01:00
Fabian Peter Hammerle eac37ae895 readme: added instructions to disable safe logging; capitalize headlines 2021-03-03 18:54:14 +01:00
Fabian Peter Hammerle 579ec95c54 readme: added apt-get install cmd for onioncircuits 2021-03-03 17:12:48 +01:00
Fabian Peter Hammerle 63cc740dae readme: added command to launch onioncircuits 2021-03-03 17:07:44 +01:00
Fabian Peter Hammerle 71cd9e4843 release v4.1.0 docker/4.1.0-tor0.4.4.7r1-amd64 v4.1.0 2021-03-03 14:25:32 +01:00
Fabian Peter Hammerle 677e9db8e2 added image labels org.opencontainers.image.title, .source & .revision
https://github.com/fphammerle/docker-onion-service/commit/46ca6d70fb2d4570bfddac6b3f5e485183e72405
https://github.com/fphammerle/docker-onion-service/commit/aa124bde955047b2de6316ff72d6b1f76d14e3ba
2021-03-03 14:08:29 +01:00
Fabian Peter Hammerle 8ae9e9e5b7 makefile: added "podman-build" target
https://github.com/fphammerle/docker-onion-service/commit/77a062c4afcd96abe1ba7663a2914a94e01b9c24
https://github.com/fphammerle/docker-onion-service/commit/4c673eef480af3bb9498c0364a55dc3d8f8a5afc
https://github.com/fphammerle/docker-onion-service/commit/a3e89529767a7eb52c4bce52277715d388f6935a
https://github.com/fphammerle/docker-onion-service/commit/e8dfe51bb831c54d9a87be7c70f3f79e2f45d9ce
2021-03-03 13:48:47 +01:00
Fabian Peter Hammerle 1951c1f3a9 enable transparent proxy 2021-03-03 12:25:12 +01:00
Fabian Peter Hammerle edac4ed3da upgrade alpine base image v3.13.1->3.13.2 including upgrade of tor package v0.4.4.6-r1->0.4.4.7-r1 (diff links below)
https://git.alpinelinux.org/aports/commit/community/tor?id=3ff23770ebde5d5ce691e662d25ba01bd5020f3d
https://git.alpinelinux.org/aports/commit/community/tor?id=a9d54349aa5fec39e2d79c46838ce05904ca9bda
https://git.alpinelinux.org/aports/commit/community/tor?id=9ed5ece0dd0317f1976a1bb4729e911786d33af9

cherry-pick of https://github.com/fphammerle/docker-onion-service/commit/0599554fd6ae2ee3404dc63cec90730b14fa1fc2
2021-02-19 13:13:56 +01:00
dependabot[bot] 5cc893c3c3 build(deps): bump alpine from 3.13.1 to 3.13.2
Bumps alpine from 3.13.1 to 3.13.2.

Signed-off-by: dependabot[bot] <support@github.com>
2021-02-19 06:10:22 +00:00
dependabot[bot] 4e2e1bbf4f build(deps): bump alpine from 3.13.0 to 3.13.1
Bumps alpine from 3.13.0 to 3.13.1.

Signed-off-by: dependabot[bot] <support@github.com>
2021-01-29 05:49:05 +00:00
Fabian Peter Hammerle 40b88ec7d5 upgrade alpine base image v3.12.3->v3.13.0 including upgrade of tor v0.4.3.7-r0->v0.4.4.6-r1 (diff links below)
https://gitweb.torproject.org/tor.git/plain/ChangeLog

https://git.alpinelinux.org/aports/commit/community/tor?id=d181b0289ff7c32d371dcd976276672bbe2e7b72
https://git.alpinelinux.org/aports/commit/community/tor?id=9a0a0a5045901ab97ef455b54ffe19c91ca6993e
https://git.alpinelinux.org/aports/commit/community/tor?id=5edd132382384956e1787d4dcd5f1ffa9c520571
https://git.alpinelinux.org/aports/commit/community/tor?id=4ecb636d72d13db0f95f6e840e755bb260c91165
2021-01-15 12:46:01 +01:00
dependabot[bot] 67c5c44495 build(deps): bump alpine from 3.12.3 to 3.13.0
Bumps alpine from 3.12.3 to 3.13.0.

Signed-off-by: dependabot[bot] <support@github.com>
2021-01-15 06:05:59 +00:00
Fabian Peter Hammerle ba4cafac27 make: add tor package version to image tag 2021-01-01 17:40:10 +01:00
Fabian Peter Hammerle fea43b11d8 make: abort docker-build if changes uncommitted; suggest git tag command
https://github.com/fphammerle/wireless-sensor-mqtt/blob/222d2e124d231b207da647c1f7a9c5ec9a37b4ac/Makefile#L34
2021-01-01 17:29:38 +01:00
Fabian Peter Hammerle 4f6950af1d make: added docker-build & docker-push target
https://github.com/fphammerle/systemctl-mqtt/commit/54a3c74eae0e85307ac5f9258c345bc133d3133a#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52
https://github.com/fphammerle/systemctl-mqtt/commit/7887079ebeed7e26cfc36bbdcbdfd6ceeb65bdee#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52
2021-01-01 17:25:40 +01:00
Fabian Peter Hammerle 7cbef67a3f release v4.0.0 docker/4.0.0-tor0.4.3.7r0-amd64 v4.0.0 2021-01-01 17:20:14 +01:00
Fabian Peter Hammerle dfe104eb09 healthcheck: replace dig with pre-installed nslookup 2021-01-01 16:38:41 +01:00
Fabian Peter Hammerle 6a9e7a1f42 healthcheck: restore dns request as network-liveness is too optimistic
partial revert of commit 8d1a635ddc.
2021-01-01 16:36:24 +01:00
Fabian Peter Hammerle 8d1a635ddc healthcheck: improve privacy by probing network-liveness instead of periodic http and dns requests 2021-01-01 13:59:50 +01:00
Fabian Peter Hammerle d573073454 upgrade tor v0.4.3.5 -> v0.4.3.7 (diff links below)
https://gitweb.torproject.org/tor.git/plain/ChangeLog

https://git.alpinelinux.org/aports/commit/community/tor?id=3a247b9dbce3988d52b1a17a3d0bb5f1dc9b4863

removes support for zstd-compressed directory traffic from armhf builds:
https://git.alpinelinux.org/aports/commit/?id=2849fa38b9a76d1ef0a9df10aa70bafa00a5ab27

adds patches to curl for irrelevant CVE-2020-8286, CVE-2020-82850 & CVE-2020-8231
https://git.alpinelinux.org/aports/commit/?id=90e58b3d833e1a1e51c524cdaa5091dbcd80c0f0
https://git.alpinelinux.org/aports/commit/main/curl?id=52697341e47e456d2ee900a53c8ef65ce8a75c23
2021-01-01 12:50:11 +01:00
Fabian Peter Hammerle ccb9eb52a1 configure github's dependabot to keep base image up-to-date
https://github.com/fphammerle/docker-postfix/commit/b273cbb38193eaa52562688522475c7e6e7df6b7
2021-01-01 12:42:38 +01:00
Fabian Peter Hammerle b85bfc4d53 ansible-playbook: select image via fingerprint 2020-10-03 17:32:38 +02:00
Fabian Peter Hammerle 9d8903fbee release v3.0.0 v3.0.0 docker/3.0.0-tor0.4.3.5-amd64 2020-10-03 17:29:06 +02:00
Fabian Peter Hammerle 8cc0734979 create mount point at data dir /var/lib/tor to be able to make container's root filesystem read-only
https://github.com/fphammerle/docker-tor-obfs4-bridge/commit/8d6514c2bda98488876f67116aa4c306a9dc28c2
https://github.com/fphammerle/docker-onion-service/commit/345840bda88620983bbf3d0f9a2975b561101ffc
2020-10-03 17:24:55 +02:00
Fabian Peter Hammerle 2778ba83d0 readme: split in sections 2020-10-03 17:12:58 +02:00
Fabian Peter Hammerle d12b5387bd readme / show circuit command: wrap, add quit command
https://github.com/fphammerle/docker-onion-service/commit/5cb7c809f30b2ac098bdf8530c9587dc659387ef
2020-10-03 11:03:34 +02:00
Fabian Peter Hammerle 97aca0c2c6 move tor's data directory to /var/lib/tor; run as user tor (uid=100)
https://github.com/fphammerle/docker-tor-obfs4-bridge/commit/8d6514c2bda98488876f67116aa4c306a9dc28c2
https://github.com/fphammerle/docker-onion-service/commit/345840bda88620983bbf3d0f9a2975b561101ffc
2020-10-03 10:52:34 +02:00
Fabian Peter Hammerle a28bf73885 ansible-playbook: drop capabilities 2020-10-03 10:36:54 +02:00