Re: [tor-bugs] #30708 [Circumvention/Obfs4]: Create a docker image for obfs4proxy

[Tor Bug Tracker & Wiki]

#30708: Create a docker image for obfs4proxy
-+-
 Reporter:  phw  |  Owner:  phw
 Type:  task | Status:  closed
 Priority:  Medium   |  Milestone:
Component:  Circumvention/Obfs4  |Version:
 Severity:  Normal   | Resolution:
 Keywords:  anti-censorship-roadmap, sponsor28,  |  implemented
  s30-o24a2  |  Actual Points:
Parent ID:  #30777   | Points:  3
 Reviewer:  cohosh   |Sponsor:
 |  Sponsor28-must
-+-
Changes (by phw):

 * keywords:  anti-censorship-roadmap, sponsor28 => anti-censorship-roadmap,
 sponsor28, s30-o24a2


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30708 [Circumvention/Obfs4]: Create a docker image for obfs4proxy

[Tor Bug Tracker & Wiki]

#30708: Create a docker image for obfs4proxy
+--
 Reporter:  phw |  Owner:  phw
 Type:  task| Status:  closed
 Priority:  Medium  |  Milestone:
Component:  Circumvention/Obfs4 |Version:
 Severity:  Normal  | Resolution:
|  implemented
 Keywords:  anti-censorship-roadmap, sponsor28  |  Actual Points:
Parent ID:  #30777  | Points:  3
 Reviewer:  cohosh  |Sponsor:
|  Sponsor28-must
+--
Changes (by phw):

 * status:  merge_ready => closed
 * resolution:   => implemented


Comment:

 Thanks for the review. I added installation instructions to our setup
 guide at:
 
https://trac.torproject.org/projects/tor/wiki/doc/PluggableTransports/obfs4proxy#Docker

 Let's call this done.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30708 [Circumvention/Obfs4]: Create a docker image for obfs4proxy

[Tor Bug Tracker & Wiki]

#30708: Create a docker image for obfs4proxy
+--
 Reporter:  phw |  Owner:  phw
 Type:  task| Status:
|  merge_ready
 Priority:  Medium  |  Milestone:
Component:  Circumvention/Obfs4 |Version:
 Severity:  Normal  | Resolution:
 Keywords:  anti-censorship-roadmap, sponsor28  |  Actual Points:
Parent ID:  #30777  | Points:  3
 Reviewer:  cohosh  |Sponsor:
|  Sponsor28-must
+--
Changes (by msherr):

 * cc: msherr (added)


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30708 [Circumvention/Obfs4]: Create a docker image for obfs4proxy

[Tor Bug Tracker & Wiki]

#30708: Create a docker image for obfs4proxy
+--
 Reporter:  phw |  Owner:  phw
 Type:  task| Status:
|  merge_ready
 Priority:  Medium  |  Milestone:
Component:  Circumvention/Obfs4 |Version:
 Severity:  Normal  | Resolution:
 Keywords:  anti-censorship-roadmap, sponsor28  |  Actual Points:
Parent ID:  #30777  | Points:  3
 Reviewer:  cohosh  |Sponsor:
|  Sponsor28-must
+--
Changes (by cohosh):

 * status:  needs_review => merge_ready


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30708 [Circumvention/Obfs4]: Create a docker image for obfs4proxy

[Tor Bug Tracker & Wiki]

#30708: Create a docker image for obfs4proxy
+--
 Reporter:  phw |  Owner:  phw
 Type:  task| Status:
|  needs_review
 Priority:  Medium  |  Milestone:
Component:  Circumvention/Obfs4 |Version:
 Severity:  Normal  | Resolution:
 Keywords:  anti-censorship-roadmap, sponsor28  |  Actual Points:
Parent ID:  #30777  | Points:  3
 Reviewer:  cohosh  |Sponsor:
|  Sponsor28-must
+--

Comment (by cohosh):

 Just got around to looking at this. It looks great! I like the
 instructions :)

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30708 [Circumvention/Obfs4]: Create a docker image for obfs4proxy

[Tor Bug Tracker & Wiki]

#30708: Create a docker image for obfs4proxy
+--
 Reporter:  phw |  Owner:  phw
 Type:  task| Status:
|  needs_review
 Priority:  Medium  |  Milestone:
Component:  Circumvention/Obfs4 |Version:
 Severity:  Normal  | Resolution:
 Keywords:  anti-censorship-roadmap, sponsor28  |  Actual Points:
Parent ID:  #30777  | Points:  3
 Reviewer:  cohosh  |Sponsor:
|  Sponsor28-must
+--
Changes (by phw):

 * status:  merge_ready => needs_review


Comment:

 I made some improvements to the container creation progress starting in
 commit `deeb0c83`. The tor process now drops privileges and I removed the
 ugly `sed` string replacement hack. Could you please review these changes
 too?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30708 [Circumvention/Obfs4]: Create a docker image for obfs4proxy

[Tor Bug Tracker & Wiki]

#30708: Create a docker image for obfs4proxy
+--
 Reporter:  phw |  Owner:  phw
 Type:  task| Status:
|  merge_ready
 Priority:  Medium  |  Milestone:
Component:  Circumvention/Obfs4 |Version:
 Severity:  Normal  | Resolution:
 Keywords:  anti-censorship-roadmap, sponsor28  |  Actual Points:
Parent ID:  #30777  | Points:  3
 Reviewer:  cohosh  |Sponsor:
|  Sponsor28-must
+--

Comment (by phw):

 Replying to [comment:4 cohosh]:
 > This looks good to me. I left a small comment on one of the commits.
 [[br]]
 Thanks!

 I [https://lists.torproject.org/pipermail/tor-relays/2019-July/017477.html
 informed tor-relays@] that we now have a docker image. Let's see if we get
 some feedback. Then, we can update our installation instructions with the
 docker image and move forward with #30777.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30708 [Circumvention/Obfs4]: Create a docker image for obfs4proxy

[Tor Bug Tracker & Wiki]

#30708: Create a docker image for obfs4proxy
+--
 Reporter:  phw |  Owner:  phw
 Type:  task| Status:
|  merge_ready
 Priority:  Medium  |  Milestone:
Component:  Circumvention/Obfs4 |Version:
 Severity:  Normal  | Resolution:
 Keywords:  anti-censorship-roadmap, sponsor28  |  Actual Points:
Parent ID:  #30777  | Points:  3
 Reviewer:  cohosh  |Sponsor:
|  Sponsor28-must
+--
Changes (by cohosh):

 * status:  needs_review => merge_ready


Comment:

 This looks good to me. I left a small comment on one of the commits.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30708 [Circumvention/Obfs4]: Create a docker image for obfs4proxy

[Tor Bug Tracker & Wiki]

#30708: Create a docker image for obfs4proxy
+--
 Reporter:  phw |  Owner:  phw
 Type:  task| Status:
|  needs_review
 Priority:  Medium  |  Milestone:
Component:  Circumvention/Obfs4 |Version:
 Severity:  Normal  | Resolution:
 Keywords:  anti-censorship-roadmap, sponsor28  |  Actual Points:
Parent ID:  #30777  | Points:  3
 Reviewer:  cohosh  |Sponsor:
|  Sponsor28-must
+--
Changes (by cohosh):

 * reviewer:   => cohosh


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30708 [Circumvention/Obfs4]: Create a docker image for obfs4proxy

[Tor Bug Tracker & Wiki]

#30708: Create a docker image for obfs4proxy
+--
 Reporter:  phw |  Owner:  phw
 Type:  task| Status:
|  needs_review
 Priority:  Medium  |  Milestone:
Component:  Circumvention/Obfs4 |Version:
 Severity:  Normal  | Resolution:
 Keywords:  anti-censorship-roadmap, sponsor28  |  Actual Points:
Parent ID:  #30777  | Points:  3
 Reviewer:  |Sponsor:
|  Sponsor28-must
+--
Changes (by phw):

 * status:  assigned => needs_review


Comment:

 I created a docker image for an obfs4 Tor bridge:
 https://dip.torproject.org/anti-censorship/docker-obfs4-bridge. You can
 test it by cloning the repository and, after entering the directory,
 running:
 {{{
 docker build -t phwinter/obfs4-bridge:0.1 .
 }}}
 Then, you can start the docker image by running:
 {{{
 ./deploy-container.sh
 }}}

 I had to work around a docker design issue: we cannot use a static OR port
 or obfs4 port in the image because that would make it possible to scan the
 IPv4 address space for these ports and block all bridges you find that
 way. We therefore need random ports. Docker's `build` command has a `-P`
 switch that picks a random, external port and forwards it to an internal,
 static port but the issue is that the image has no easy way of learning
 what external port docker picked. Tor however needs to know because it has
 to advertise these ports in its descriptor.

 My workaround is a shell script that automatically determines a random
 port and passes it to the image via environment variables. It's not pretty
 but it works.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30708 [Circumvention/Obfs4]: Create a docker image for obfs4proxy

[Tor Bug Tracker & Wiki]

#30708: Create a docker image for obfs4proxy
+--
 Reporter:  phw |  Owner:  phw
 Type:  task| Status:  assigned
 Priority:  Medium  |  Milestone:
Component:  Circumvention/Obfs4 |Version:
 Severity:  Normal  | Resolution:
 Keywords:  anti-censorship-roadmap, sponsor28  |  Actual Points:
Parent ID:  #30777  | Points:  3
 Reviewer:  |Sponsor:
|  Sponsor28-must
+--
Changes (by gaba):

 * parent:   => #30777


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs