41 lines
2.2 KiB
Markdown
41 lines
2.2 KiB
Markdown
# TODO=704 Tor CachyOS CTR + CookieAuth (koopa)
|
||
|
||
Relay was down (stale PIDFile / start-timeout on forking unit), keys intact. Recreated **same identity** on CachyOS container; CookieAuth for ControlPort; host tor disabled.
|
||
|
||
## Stand after APPLY (2026-10-24 ~21:47–21:51 Europe/Zurich)
|
||
|
||
| Item | Value |
|
||
|------|--------|
|
||
| CTR | `koopa-tor-relay` Up, image `localhost/koopa-tor-relay:latest` (=`:cachyos`) |
|
||
| Tor | 0.4.9.14 (CachyOS/Arch extra) |
|
||
| Unit | `container-koopa-tor-relay.service` Type=simple, active |
|
||
| Host tor | `tor.service` disabled + failed/inactive |
|
||
| FP | `02C7EECCDF7814FBA2DB1CBAED000D06E8A32EE8` (keys mtime 2024-11-14) |
|
||
| ORPort | 8080 |
|
||
| ControlPort | 127.0.0.1:9051 CookieAuthentication=1, CookieAuthFile=/var/lib/tor/control_auth_cookie |
|
||
| Bootstrap | PROGRESS=100 done; status/circuit-established=1 |
|
||
| Unauth ControlPort | 514 Authentication required |
|
||
| Cookie AUTH | 250 OK |
|
||
|
||
## Steps
|
||
|
||
1. Dry-run `/tmp/tor.sh` on koopa → STATUS=dry-run-ok; NEXT=`sudo APPLY=1 /tmp/tor.sh` (host tor was still enabled).
|
||
2. Human: `systemctl disable --now tor.service`, then `sudo APPLY=1 /tmp/tor.sh`.
|
||
3. APPLY: wrote CachyOS Containerfile, pulled `docker.io/cachyos/cachyos:latest`, build (cache hit), `podman create --replace --network host --user 1000:1000 --userns keep-id`, torrc bak `torrc.bak-cookie-20261024-214720`, CookieAuth on.
|
||
4. First APPLY hit dbus fail under sudo (`$DBUS_SESSION_BUS_ADDRESS` / `$XDG_RUNTIME_DIR` unset). Unit rewrite + enable finished with XDG/DBUS set; script path re-exec as SUDO_USER for later runs.
|
||
5. Verify from magikoopa SSH: unit active, CTR Up, FP match, circuit-established=1, unauth 514.
|
||
|
||
## Live paths
|
||
|
||
- `~/koopa-tor-relay/{torrc,data,log,build/Containerfile}`
|
||
- `~/.config/systemd/user/container-koopa-tor-relay.service`
|
||
- Driver: `/tmp/tor.sh` (TARGET=koopa); upgrade later: `~/upgrade-containers.sh --apply --rebuild-local --only koopa-tor-relay`
|
||
|
||
## Akte mirrors
|
||
|
||
- `configs/tor/torrc`
|
||
- `configs/tor/build/Containerfile`
|
||
- `configs/systemd/user/container-koopa-tor-relay.service`
|
||
- `host/tor/README.md` updated (was stale host `tor.service`)
|
||
|
||
Sibling: firecuda brew tor CookieAuth same day (FP `52BB94DDC1292F950CF728708AC48523E018A718`, MyFamily both ways). Parent TODO=704.
|