docker – Rev 9

Subversion Repositories:
Rev:
FROM debian:stable-slim

# update package manager
RUN  apt-get update -y && \
     apt-get upgrade -y && \
     apt-get dist-upgrade -y && \
     apt-get -y autoremove && \
     apt-get clean

# install required packages
RUN apt-get install -y \
    expect \
    coreutils \
    bash \
    curl \
    git \
    build-essential \
    autoconf \
    automake \
    libtool \
    pkgconf \
    libevent-dev \
    libssl-dev \
    libzstd-dev \
    liblzma-dev \
    zlib1g \
    zlib1g-dev 

# install the latest golang
WORKDIR /tmp
RUN curl -fsSL "https://go.dev/dl/$(curl -s 'https://go.dev/VERSION?m=text' | head -1).linux-amd64.tar.gz" -o go.tar.gz && \
    tar -xzf go.tar.gz && \
    rm go.tar.gz

# compile the latest snowflake
WORKDIR /tmp
RUN git clone https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake.git
WORKDIR /tmp/snowflake/client
RUN /tmp/go/bin/go build && \
    mkdir -p /usr/local/bin && \
    cp client /usr/local/bin/snowflake-client

# compile the latest tor
WORKDIR /tmp
RUN git clone https://gitlab.torproject.org/tpo/core/tor.git
WORKDIR /tmp/tor
RUN ./autogen.sh && \
    ./configure \
        --enable-lzma \
        --enable-zstd \
        --disable-gcc-hardening \
        --disable-linker-hardening \
        --disable-manpage \
        --disable-html-manual \
        --disable-asciidoc \
        --disable-unittests && \
    make && \
    mkdir -p /usr/local/bin && \
    cp src/app/tor /usr/local/bin/

# remove packages that will not be used
WORKDIR /
RUN rm -rf /tmp/{snowflake,tor,go}
RUN apt-get purge -y \
        curl \
        git \
        build-essential \
        autoconf \
        automake \
        libtool \
        pkgconf && \
    apt-get autoremove -y 

# tor required port
EXPOSE 9050 9053

# add filesystem requirements
ADD rootfs /

# set up healthcheck
HEALTHCHECK --interval=5m --timeout=3s \
    CMD /usr/local/bin/tor-check-circuit

# execute the bootstrapper that will start tor
ENTRYPOINT [ "/usr/local/bin/run" ]