release v2.1.0

> [notice] New control connection opened from 127.0.0.1.

CHANGELOG.md

@@ -6,6 +6,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.1.0] - 2020-09-27
+### Added
+- Enable [Tor control](https://gitweb.torproject.org/torspec.git/tree/control-spec.txt)
+  listener on port `9051`
+  (listening on loopback device only)
+
 ## [2.0.0] - 2020-03-24
 ### Changed
 - Changed DNS port from 53 to 9053
@@ -25,7 +31,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - Tor Socks5 & DNS proxy
 
-[Unreleased]: https://github.com/fphammerle/docker-tor-proxy/compare/v2.0.0...HEAD
+[Unreleased]: https://github.com/fphammerle/docker-tor-proxy/compare/v2.1.0...HEAD
+[2.1.0]: https://github.com/fphammerle/docker-tor-proxy/compare/v2.0.0...v2.1.0
 [2.0.0]: https://github.com/fphammerle/docker-tor-proxy/compare/v1.1.1...v2.0.0
 [1.1.1]: https://github.com/fphammerle/docker-tor-proxy/compare/v1.1.0...v1.1.1
 [1.1.0]: https://github.com/fphammerle/docker-tor-proxy/compare/1.0.0...v1.1.0

Dockerfile

@@ -9,11 +9,11 @@ RUN adduser -S onion \
         bind-tools=$BIND_TOOLS_PACKAGE_VERSION `# dig` \
         tor=$TOR_PACKAGE_VERSION
 
-# RUN apk add --no-cache \
-#         less \
-#         man \
-#         tor-doc=$TOR_PACKAGE_VERSION
-# ENV PAGER=less
+#RUN apk add --no-cache \
+#        less \
+#        man-db \
+#        tor-doc=$TOR_PACKAGE_VERSION
+#ENV PAGER=less
 
 EXPOSE 9050/tcp
 EXPOSE 9053/udp

README.md

@@ -5,7 +5,7 @@ docker hub: https://hub.docker.com/r/fphammerle/tor-proxy
 signed tags: https://github.com/fphammerle/docker-tor-proxy/tags
 
 ```sh
-$ docker run --rm --name tor-proxy \
+$ sudo docker run --rm --name tor_proxy \
     -p 127.0.0.1:9050:9050/tcp \
     -p 127.0.0.1:53:9053/udp \
     fphammerle/tor-proxy
@@ -13,7 +13,7 @@ $ docker run --rm --name tor-proxy \
 
 or after cloning the repository 🐙
 ```sh
-$ docker-compose up
+$ sudo docker-compose up
 ```
 
 test proxies:
@@ -29,10 +29,15 @@ $ chromium-browser --proxy-server=socks5://localhost:9050 ipinfo.io
 
 isolate:
 ```sh
-iptables -A OUTPUT ! -o lo -j REJECT --reject-with icmp-admin-prohibited
+sudo iptables -A OUTPUT ! -o lo -j REJECT --reject-with icmp-admin-prohibited
 ```
 
 change `SocksTimeout` option:
 ```sh
-$ docker run -e SOCKS_TIMEOUT_SECONDS=60 …
+$ sudo docker run -e SOCKS_TIMEOUT_SECONDS=60 …
+```
+
+show circuits:
+```sh
+$ sudo docker exec tor_proxy sh -c 'printf "AUTHENTICATE\nGETINFO circuit-status\n" | nc localhost 9051'
 ```

docker-compose.yml

@@ -9,10 +9,11 @@ services:
     - '127.0.0.1:53:9053/udp'
     environment:
       SOCKS_TIMEOUT_SECONDS: 240
-    security_opt: ['no-new-privileges']
-    restart: unless-stopped
+    cap_drop: [ALL]
+    #cap_add: [SYS_PTRACE]
+    security_opt: [no-new-privileges]
     cpus: 0.5
     mem_limit: 128m
-    #cap_add: [SYS_PTRACE]
+    restart: unless-stopped
 
 # https://docs.docker.com/compose/compose-file/compose-file-v2/

torrc.template

@@ -1,8 +1,11 @@
 Log notice stdout
 
-SocksPort 0.0.0.0:9050
+# https://gitweb.torproject.org/torspec.git/tree/control-spec.txt
+ControlPort localhost:9051
+
 DNSPort 0.0.0.0:9053
 
+SocksPort 0.0.0.0:9050
 SocksTimeout {socks_timeout_seconds}
 
 # try to