initial commit 🎉

.github/workflows/build-and-push.yml

@@ -0,0 +1,57 @@
+name: Build and push image
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - 'main'
+    tags:
+      - '*'
+  pull_request:
+    branches:
+      - 'main'
+
+permissions:
+  contents: read
+  # packages: write
+
+jobs:
+  build-image:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: docker/setup-qemu-action@v2
+      - uses: docker/setup-buildx-action@v2
+      - uses: docker/login-action@v2
+        if: github.event_name != 'pull_request'
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      # - uses: docker/login-action@v2
+      #   if: github.event_name != 'pull_request'
+      #   with:
+      #     registry: ghcr.io
+      #     username: ${{ github.actor }}
+      #     password: ${{ secrets.GITHUB_TOKEN }}
+      - uses: docker/metadata-action@v4
+        id: meta
+        with:
+          images: |
+            jakejarvis/tor
+          # ghcr.io/jakejarvis/tor
+          flavor: |
+            latest=auto
+          tags: |
+            type=raw,value=latest,enable={{is_default_branch}}
+            type=pep440,pattern={{raw}}
+            type=pep440,pattern=v{{major}}.{{minor}}
+            type=ref,event=pr
+      - uses: docker/build-push-action@v3
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          builder: ${{ steps.buildx.outputs.name }}
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

Dockerfile

@@ -0,0 +1,41 @@
+FROM ubuntu:22.04
+LABEL maintainer "Jake Jarvis <jake@jarv.is>"
+
+ARG DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get update \
+ && apt-get install --no-install-recommends --no-install-suggests -y \
+        ca-certificates \
+        apt-transport-https \
+        apt-utils \
+        lsb-release \
+        gnupg \
+        curl \
+ # Add torproject.org repository for stable Tor
+ && curl -fsSL https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --dearmor -o /usr/share/keyrings/tor-archive-keyring.gpg \
+ && echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org $(lsb_release -cs) main \
+deb-src [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org $(lsb_release -cs) main" | tee /etc/apt/sources.list.d/tor.list >/dev/null \
+ # Install Tor with GeoIP
+ && apt-get update \
+ && apt-get install --no-install-recommends --no-install-suggests -y \
+        tor \
+        tor-geoipdb \
+        obfs4proxy \
+        iputils-ping \
+ # Tidy up
+ && apt-get purge --auto-remove -y \
+        apt-transport-https \
+        apt-utils \
+        lsb-release \
+        gnupg \
+        curl \
+ && apt-get clean \
+ && rm -rf /var/lib/apt/lists/*
+
+# Copy entrypoint script
+COPY ./entrypoint.sh /usr/local/bin/docker-entrypoint
+
+USER debian-tor
+
+ENTRYPOINT ["docker-entrypoint"]
+CMD ["tor", "-f", "/etc/tor/torrc"]

entrypoint.sh

@@ -0,0 +1,9 @@
+#!/bin/sh
+set -o errexit
+
+# fix permissions
+find /var/lib/tor -type d -exec chmod -v 700 {} \;
+find /var/lib/tor -type f -exec chmod -v 600 {} \;
+chown -R debian-tor /var/lib/tor
+
+exec "$@"