18 lines
819 B
Docker
18 lines
819 B
Docker
# koopa-tor-relay — Tor non-exit relay
|
|
# Process is NOT root: debian-tor remapped to uid/gid 1000 for rootless
|
|
# podman + host volumes (~/koopa-tor-relay/{data,log} owned by hernani).
|
|
# Recreate container with: --user 1000:1000 --userns=keep-id (see README).
|
|
FROM docker.io/library/debian:bookworm-slim
|
|
ENV DEBIAN_FRONTEND=noninteractive
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends tor nyx ca-certificates tor-geoipdb \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& mkdir -p /var/lib/tor /var/log/tor \
|
|
&& groupmod --gid 1000 debian-tor \
|
|
&& usermod --uid 1000 --gid 1000 debian-tor \
|
|
&& chown -R debian-tor:debian-tor /var/lib/tor /var/log/tor \
|
|
&& chmod 700 /var/lib/tor
|
|
EXPOSE 8080 9051
|
|
USER debian-tor:debian-tor
|
|
ENTRYPOINT ["/usr/bin/tor"]
|
|
CMD ["-f", "/etc/tor/torrc", "--runasdaemon", "0"]
|