2017-08-27 18:05:49 +02:00

69 lines
2.5 KiB
Docker

FROM alpine:edge
ARG TOR_VERSION=0.2.9.10
ARG ARM_VERSION=1.4.5.0
ARG GPG_Mathewson="2133 BC60 0AB1 33E1 D826 D173 FE43 009C 4607 B1FB"
ARG GPG_Johnson="6827 8CC5 DD2D 1E85 C4E4 5AD9 0445 B7AB 9ABB EEC6"
ENV TERM=xterm \
UID=991 GID=991
RUN echo "@community https://nl.alpinelinux.org/alpine/v3.4/community" >> /etc/apk/repositories \
&& BUILD_DEPS=" \
libevent-dev \
libressl-dev \
zlib-dev \
build-base \
gnupg \
ca-certificates" \
&& apk -U upgrade && apk add \
${BUILD_DEPS} \
su-exec \
tini@community \
python \
libevent \
libressl \
zlib \
&& cd /tmp \
&& TOR_TARBALL="tor-${TOR_VERSION}.tar.gz" \
&& wget -q https://www.torproject.org/dist/${TOR_TARBALL} \
&& echo "Verifying ${TOR_TARBALL} using GPG..." \
&& wget -q https://www.torproject.org/dist/${TOR_TARBALL}.asc \
&& gpg --keyserver pool.sks-keyservers.net --recv-keys 0xFE43009C4607B1FB \
&& FINGERPRINT="$(LANG=C gpg --verify ${TOR_TARBALL}.asc ${TOR_TARBALL} 2>&1 \
| sed -n "s#Primary key fingerprint: \(.*\)#\1#p")" \
&& if [ -z "${FINGERPRINT}" ]; then echo "Warning! Invalid GPG signature!" && exit 1; fi \
&& if [ "${FINGERPRINT}" != "${GPG_Mathewson}" ]; then echo "Warning! Wrong GPG fingerprint!" && exit 1; fi \
&& echo "All seems good, now unpacking ${TOR_TARBALL}..." \
&& tar xzf ${TOR_TARBALL} && cd tor-${TOR_VERSION} \
&& ./configure --disable-asciidoc && make && make install \
&& cd /tmp \
&& ARM_TARBALL="arm-${ARM_VERSION}.tar.bz2" \
&& wget -q https://www.atagar.com/arm/resources/static/${ARM_TARBALL} \
&& echo "Verifying ${ARM_TARBALL}..." \
&& wget -q https://www.atagar.com/arm/resources/static/${ARM_TARBALL}.asc \
&& gpg --keyserver pgp.mit.edu --recv-keys 0x9ABBEEC6 \
&& FINGERPRINT="$(LANG=C gpg --verify ${ARM_TARBALL}.asc ${ARM_TARBALL} 2>&1 \
| sed -n "s#Primary key fingerprint: \(.*\)#\1#p")" \
&& if [ -z "${FINGERPRINT}" ]; then echo "Warning! Invalid GPG signature!" && exit 1; fi \
&& if [ "${FINGERPRINT}" != "${GPG_Johnson}" ]; then echo "Warning! Wrong GPG fingerprint!" && exit 1; fi \
&& echo "All seems good, now unpacking ${ARM_TARBALL}..." \
&& tar xjf /tmp/${ARM_TARBALL} && cd arm && ./install \
&& apk del ${BUILD_DEPS} \
&& rm -rf /var/cache/apk/* /tmp/* /root/.gnupg
COPY run.sh /usr/local/bin/run.sh
RUN chmod +x /usr/local/bin/run.sh
VOLUME /tor/config /tor/data
EXPOSE 9001 9030
LABEL tor="Tor $TOR_VERSION" \
arm="Arm $ARM_VERSION" \
maintainer="Wonderfall <wonderfall@targaryen.house>"
ENTRYPOINT ["run.sh"]