hernani/koopa-admin-log
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

tor: container create helper and relay docs.

Browse source 
Document ORPort layout and host vs container tor coexistence.
This commit is contained in:
Hernâni Marques 2026-07-17 00:30:13 +02:00
parent a42b43b410
commit 85d4e05ef0
4 changed files with 63 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

13
configs/tor/README.md
View file

@ -15,13 +15,16 @@ Mirror in this repo: `configs/tor/`.
| MyFamily | `52BB94DDC1292F950CF728708AC48523E018A718` |
| Bandwidth* | 2000 MBytes rate/burst |
| Image | `localhost/koopa-tor-relay:latest` (Debian bookworm + tor + nyx) |
| Process user | **non-root** `debian-tor` remapped to **uid/gid 1000** (`USER` in image) |
| Rootless note | recreate with `--user 1000:1000 --userns=keep-id` so `~/koopa-tor-relay/data` (hernani) stays writable |
## Files
| File | Role |
|------|------|
| `torrc` | Active policy (mounted read-only into container) |
| `Containerfile` | Image build (tor, nyx, tor-geoipdb) |
| `Containerfile` | Image build (tor, nyx, tor-geoipdb); **not** root process |
| `create-container.sh` | Recreate container non-root + host net + volume mounts |
| `migrate-identity.sh` | One-shot copy of `/var/lib/tor` → container data (same identity) |
| `container-koopa-tor-relay.service` | systemd --user unit template |
| `torrc.minimal` / `torrc.sample` | Distro templates (reference) |
@ -29,8 +32,16 @@ Mirror in this repo: `configs/tor/`.
## Ops
```bash
# build image + recreate non-root container (as hernani)
cd ~/koopa-tor-relay/build # or configs/tor mirror
podman build -t localhost/koopa-tor-relay:latest -f Containerfile .
./create-container.sh # or: bash configs/tor/create-container.sh
podman start koopa-tor-relay
systemctl --user enable --now container-koopa-tor-relay.service
# status
podman ps --filter name=koopa-tor-relay
podman exec koopa-tor-relay id # expect uid=1000(debian-tor)
systemctl --user status container-koopa-tor-relay
ss -lntp | grep -E '8080|9051'
tail -f ~/koopa-tor-relay/log/notices.log