hernani/koopa-admin-log
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

tor: CachyOS CTR CookieAuth same FP (TODO=704)

Browse source
This commit is contained in:
Hernâni Marques 2026-10-21 03:32:38 +02:00
parent eb4349085d
commit 8370ad2e33
No known key found for this signature in database
7 changed files with 164 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

31
host/tor/README.md
View file

@ -1,13 +1,30 @@
# Tor on koopa
**Runtime:** host **`tor.service`** (not a podman container).
**Ports:** ORPort **8080** · ControlPort **9051** (loopback).
**Non-exit** relay (`ExitRelay 0`).
**Runtime:** rootless podman container **`koopa-tor-relay`** (CachyOS base, Arch `extra/tor`), managed by user unit **`container-koopa-tor-relay.service`** (`Type=simple`, `podman start --attach`).
**Host `tor.service`:** disabled / must stay off (port clash on ORPort 8080 + ControlPort 9051).
**Ports:** ORPort **8080** · ControlPort **127.0.0.1:9051** (CookieAuthentication + CookieAuthFile).
**Non-exit** relay (`ExitRelay 0`). Nickname **KoopaRelay**.
**Fingerprint (stable keys under `~/koopa-tor-relay/data/keys/`):** `02C7EECCDF7814FBA2DB1CBAED000D06E8A32EE8`
**Family:** firecuda FireCudaRelay `52BB94DDC1292F950CF728708AC48523E018A718`
Live tree: `~/koopa-tor-relay/` (`torrc`, `data/`, `log/`, `build/Containerfile`).
Mirrors in this repo: `configs/tor/torrc`, `configs/tor/build/Containerfile`, `configs/systemd/user/container-koopa-tor-relay.service`.
```bash
systemctl status tor
ss -lntp | grep -E '8080|9051'
# status
systemctl --user status container-koopa-tor-relay.service
podman ps --filter name=koopa-tor-relay
# ControlPort cookie auth (hex)
COOKIE=$(xxd -p -c 256 ~/koopa-tor-relay/data/control_auth_cookie)
printf 'AUTHENTICATE %s\r\nGETINFO fingerprint\r\nGETINFO status/circuit-established\r\nQUIT\r\n' "$COOKIE" | nc -w 3 127.0.0.1 9051
```
login-health: WARN if `tor.service` not active.
Legacy `koopa-tor-relay` / `configs/tor/` removed from live inventory (git history keeps them).
Apply / recreate (after host tor off):
```bash
sudo APPLY=1 /tmp/tor.sh
# later upgrades:
~/upgrade-containers.sh --apply --rebuild-local --only koopa-tor-relay
```
login-health: expect user unit active + CTR Up; host `tor.service` inactive. Parent TODO=704.