FROM ubuntu:22.04
LABEL maintainer="Jake Jarvis <jake@jarv.is>" \
      repository="https://github.com/jakejarvis/tor-docker" \
      # https://docs.github.com/en/free-pro-team@latest/packages/managing-container-images-with-github-container-registry/connecting-a-repository-to-a-container-image#connecting-a-repository-to-a-container-image-on-the-command-line
      org.opencontainers.image.source="https://github.com/jakejarvis/tor-docker"

ARG DEBIAN_FRONTEND=noninteractive

RUN apt-get update \
 && apt-get install --no-install-recommends --no-install-suggests -y \
        ca-certificates \
        apt-transport-https \
        lsb-release \
        curl \
        gnupg \
 # Add torproject.org repository for stable Tor
 && curl -fsSL https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --dearmor -o /usr/share/keyrings/tor-archive-keyring.gpg \
 && echo "deb [signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org $(lsb_release -cs) main \
deb-src [signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org $(lsb_release -cs) main" | tee /etc/apt/sources.list.d/tor.list >/dev/null \
 # Install Tor with GeoIP
 && apt-get update \
 && apt-get install --no-install-recommends --no-install-suggests -y \
        tor \
        tor-geoipdb \
        deb.torproject.org-keyring \
        obfs4proxy \
        iputils-ping \
 # Tidy up
 && apt-get purge --auto-remove -y \
        apt-transport-https \
        lsb-release \
        curl \
        gnupg \
 && apt-get clean \
 && rm -rf /var/lib/apt/lists/*

# Copy a simple default config
COPY torrc.default /etc/tor/torrc

# Copy entrypoint script & ensure it's executable
COPY ./entrypoint.sh /usr/local/bin/docker-entrypoint
RUN chmod ugo+rx /usr/local/bin/docker-entrypoint

# Tor data should be persisted on the host
VOLUME /var/lib/tor

# Make sure files are owned by the tor user
RUN chown -R debian-tor /etc/tor \
 && chown -R debian-tor /var/lib/tor

# Run tor as a non-root user
USER debian-tor

ENTRYPOINT ["docker-entrypoint"]
CMD ["tor", "-f", "/etc/tor/torrc"]