hernani/koopa-admin-log
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
koopa-admin-log/2026/2026-10-24--todo704-tor-cachyos-cookieauth.md
Hernâni Marques 8370ad2e33
tor: CachyOS CTR CookieAuth same FP (TODO=704)
2026-10-21 03:32:38 +02:00

2.2 KiB
Raw Permalink Blame History

TODO=704 Tor CachyOS CTR + CookieAuth (koopa)

Relay was down (stale PIDFile / start-timeout on forking unit), keys intact. Recreated same identity on CachyOS container; CookieAuth for ControlPort; host tor disabled.

Stand after APPLY (2026-10-24 ~21:47–21:51 Europe/Zurich)

Item Value
CTR koopa-tor-relay Up, image localhost/koopa-tor-relay:latest (=:cachyos)
Tor 0.4.9.14 (CachyOS/Arch extra)
Unit container-koopa-tor-relay.service Type=simple, active
Host tor tor.service disabled + failed/inactive
FP 02C7EECCDF7814FBA2DB1CBAED000D06E8A32EE8 (keys mtime 2024-11-14)
ORPort 8080
ControlPort 127.0.0.1:9051 CookieAuthentication=1, CookieAuthFile=/var/lib/tor/control_auth_cookie
Bootstrap PROGRESS=100 done; status/circuit-established=1
Unauth ControlPort 514 Authentication required
Cookie AUTH 250 OK

Steps

  1. Dry-run /tmp/tor.sh on koopa → STATUS=dry-run-ok; NEXT=sudo APPLY=1 /tmp/tor.sh (host tor was still enabled).
  2. Human: systemctl disable --now tor.service, then sudo APPLY=1 /tmp/tor.sh.
  3. APPLY: wrote CachyOS Containerfile, pulled docker.io/cachyos/cachyos:latest, build (cache hit), podman create --replace --network host --user 1000:1000 --userns keep-id, torrc bak torrc.bak-cookie-20261024-214720, CookieAuth on.
  4. First APPLY hit dbus fail under sudo ($DBUS_SESSION_BUS_ADDRESS / $XDG_RUNTIME_DIR unset). Unit rewrite + enable finished with XDG/DBUS set; script path re-exec as SUDO_USER for later runs.
  5. Verify from magikoopa SSH: unit active, CTR Up, FP match, circuit-established=1, unauth 514.

Live paths

  • ~/koopa-tor-relay/{torrc,data,log,build/Containerfile}
  • ~/.config/systemd/user/container-koopa-tor-relay.service
  • Driver: /tmp/tor.sh (TARGET=koopa); upgrade later: ~/upgrade-containers.sh --apply --rebuild-local --only koopa-tor-relay

Akte mirrors

  • configs/tor/torrc
  • configs/tor/build/Containerfile
  • configs/systemd/user/container-koopa-tor-relay.service
  • host/tor/README.md updated (was stale host tor.service)

Sibling: firecuda brew tor CookieAuth same day (FP 52BB94DDC1292F950CF728708AC48523E018A718, MyFamily both ways). Parent TODO=704.