diff options
Diffstat (limited to 'arch/tde-deps/tor')
-rw-r--r-- | arch/tde-deps/tor/PKGBUILD | 69 | ||||
-rw-r--r-- | arch/tde-deps/tor/keys/pgp/1C1BC007A9F607AA8152C040BEA7B180B1491921.asc | 43 | ||||
-rw-r--r-- | arch/tde-deps/tor/keys/pgp/2133BC600AB133E1D826D173FE43009C4607B1FB.asc | 123 | ||||
-rw-r--r-- | arch/tde-deps/tor/keys/pgp/B74417EDDF22AC9F9E90F49142E86A2A11F48D36.asc | 51 | ||||
-rw-r--r-- | arch/tde-deps/tor/tor.service | 35 | ||||
-rw-r--r-- | arch/tde-deps/tor/tor.sysusers | 1 | ||||
-rw-r--r-- | arch/tde-deps/tor/tor.tmpfiles | 1 | ||||
-rw-r--r-- | arch/tde-deps/tor/torrc.patch | 28 |
8 files changed, 351 insertions, 0 deletions
diff --git a/arch/tde-deps/tor/PKGBUILD b/arch/tde-deps/tor/PKGBUILD new file mode 100644 index 000000000..537b2902d --- /dev/null +++ b/arch/tde-deps/tor/PKGBUILD @@ -0,0 +1,69 @@ +# Maintainer: Lukas Fleischer <lfleischer@archlinux.org> +# Maintainer: Levente Polyak <anthraxx[at]archlinux[dot]org> +# Maintainer: kpcyrd <kpcyrd[at]archlinux[dot]org> +# Contributor: Daniel Micay <danielmicay@gmail.com> +# Contributor: simo <simo@archlinux.org> +# Contributor: Sid Karunaratne + +pkgname=tor +pkgver=0.4.7.11 +pkgrel=1 +pkgdesc='Anonymizing overlay network.' +arch=('powerpc64le') +url='https://www.torproject.org/download/tor/' +license=('BSD') +depends=('openssl' 'libevent' 'bash' 'libseccomp' 'zstd' 'libcap' 'systemd-libs' + 'libsystemd.so' 'libzstd.so' 'libseccomp.so' 'libcap.so') +optdepends=('torsocks: for torify') +makedepends=('ca-certificates' 'systemd') +backup=('etc/tor/torrc') +source=("https://dist.torproject.org/${pkgname}-${pkgver}.tar.gz"{,.sha256sum{,.asc}} + 'torrc.patch' + 'tor.sysusers' + 'tor.tmpfiles' + 'tor.service') +b2sums=('2d743e7d0aea63e76f6e24aa235792af8691fde419f56bbdf8c6ee865250a09ec06454ec84abac8ba47e3d61a363c937fc050376172d3ec6b0815998d1c8679e' + '1e49ba88ae21af6589a9815603ee375cc0dc85fcd8dd5a5f52cd44659438874ae9d10b09b7f15cadd2c30d2e8012a27be4233dcb19195d4627f19a59ccf68d0b' + 'SKIP' + '3359e138d823a77df2a42ce3fe8c6ecb4004e9ec191863db7857aceea7c136c78f09518b1a199dfd3215f5d61f1c060f4a0e2141c5bdb6b847af60fb6e9a81a7' + '9053da53926f2120ac57b6c1442238f5bbd89bf9270347c4e00b721b39939bebc6adfcf814a9d7289dfd14d085d91c193529305336db93190da5b7f586a031df' + '5d55d9a7e42b6ce78b8ab985bab37afe8f0bacddb5abd895c4a490adb8f98b9422f90b40066fef05ecf37b7b21e80aadc615c4b7f6e12b05581304113a1b1f1d' + '327c1a35c3d4c44f93edb47959c8c41ab6af4cbfcbb8f4e9f54f2f69d17d148bf85e2d2c8aefe2d3165e123056dd68a248af78d1ba713b94a4e6d27a9cf412f1') +validpgpkeys=( + '2133BC600AB133E1D826D173FE43009C4607B1FB' # Nick Mathewson + 'B74417EDDF22AC9F9E90F49142E86A2A11F48D36' # David Goulet + '1C1BC007A9F607AA8152C040BEA7B180B1491921' # Alexander Færøy +) + +prepare() { + # verify the signed sums match the expected source tarball + sha256sum -c ${pkgname}-${pkgver}.tar.gz.sha256sum + cd ${pkgname}-${pkgver} + # uncomment essential config sections in the torrc file + patch -Np1 < "${srcdir}/torrc.patch" +} + +build() { + cd ${pkgname}-${pkgver} + ./configure \ + --prefix=/usr \ + --sysconfdir=/etc \ + --localstatedir=/var + make +} + +package() { + cd ${pkgname}-${pkgver} + + make DESTDIR="${pkgdir}" install + mv "${pkgdir}"/etc/tor/torrc{.sample,} + + # install arch custom files + install -Dm 644 "${srcdir}"/*.service -t "${pkgdir}"/usr/lib/systemd/system + install -Dm 644 "${srcdir}"/tor.sysusers "${pkgdir}"/usr/lib/sysusers.d/tor.conf + install -Dm 644 "${srcdir}"/tor.tmpfiles "${pkgdir}"/usr/lib/tmpfiles.d/tor.conf + + install -Dm 644 LICENSE -t "${pkgdir}"/usr/share/licenses/${pkgname} +} + +# vim: ts=2 sw=2 et: diff --git a/arch/tde-deps/tor/keys/pgp/1C1BC007A9F607AA8152C040BEA7B180B1491921.asc b/arch/tde-deps/tor/keys/pgp/1C1BC007A9F607AA8152C040BEA7B180B1491921.asc new file mode 100644 index 000000000..9cc80960e --- /dev/null +++ b/arch/tde-deps/tor/keys/pgp/1C1BC007A9F607AA8152C040BEA7B180B1491921.asc @@ -0,0 +1,43 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mDMEXegH3RYJKwYBBAHaRw8BAQdA1IMvjZzYALGBFe/ARHNSXuQjccz0HgOHBHRq +v8Pb4j+0H0FsZXhhbmRlciBGw6Zyw7h5IDxhaGZAMHg5MC5kaz6ImQQTFggAQQIb +AwUJCWYBgAULCQgHAgYVCgkICwIEFgIDAQIeAQIXgBYhBBwbwAep9geqgVLAQL6n +sYCxSRkhBQJd6GooAhkBAAoJEL6nsYCxSRkhdqEA/0skJeGZkqRmlHPXqTFZMvbh +As2kY9Lm5LBGesjgQCspAPwJZagtqC5252zPFMlaIUu2hxcUeA+HwdLqnnl6Wjvs +AbQmQWxleGFuZGVyIEbDpnLDuHkgPGFoZkB0b3Jwcm9qZWN0Lm9yZz6IlgQTFggA +PhYhBBwbwAep9geqgVLAQL6nsYCxSRkhBQJd6AqCAhsDBQkJZgGABQsJCAcCBhUK +CQgLAgQWAgMBAh4BAheAAAoJEL6nsYCxSRkhzmsBALbObQ580jsPTu8bSgbowNOl +CpciTMcQ9wEYz6pvQQVeAP4x7sGLzSzyXVZdTz4GJ5gidbuy+XqX3WoGUbB6kOT5 +BLQkQWxleGFuZGVyIEbDpnLDuHkgPGFoZkBib3JuaGFjay5vcmc+iJYEExYIAD4W +IQQcG8AHqfYHqoFSwEC+p7GAsUkZIQUCXegKdwIbAwUJCWYBgAULCQgHAgYVCgkI +CwIEFgIDAQIeAQIXgAAKCRC+p7GAsUkZIRfkAP997/8J1lf3D7PiY21tPnB8d+5S +CXI/qI8mEfhaDZY+SAD/cfCblmB8CYzashZAbFM/6dwwNrNR7VBrzYyaRPhpkAK0 +IEFsZXhhbmRlciBGw6Zyw7h5IDxhaGZAZnNmZS5vcmc+iJYEExYIAD4WIQQcG8AH +qfYHqoFSwEC+p7GAsUkZIQUCXegKbwIbAwUJCWYBgAULCQgHAgYVCgkICwIEFgID +AQIeAQIXgAAKCRC+p7GAsUkZIdxtAQDuraf/2l/6BGDEAERL63OsjyN692MMur3P +KRy4kWdQzwEAod6V12Y5X3yjraPkbsiGC5QsXraAAz7ihSkIcJs0NgG0IUFsZXhh +bmRlciBGw6Zyw7h5IDxhaGZAaXJzc2kub3JnPoiWBBMWCAA+FiEEHBvAB6n2B6qB +UsBAvqexgLFJGSEFAl3oCmMCGwMFCQlmAYAFCwkIBwIGFQoJCAsCBBYCAwECHgEC +F4AACgkQvqexgLFJGSG+PAD7BECXB/S+eUWz118sqaiyrBtr/2msq89p7FNMswoO +IlQBAMgO1j8A5xW+hW8YOfiklahZh2TUHRVrcNhrE4R6PgELtCBBbGV4YW5kZXIg +RsOmcsO4eSA8YWhmQGlyYzYubmV0PoiWBBMWCAA+FiEEHBvAB6n2B6qBUsBAvqex +gLFJGSEFAl3oClYCGwMFCQlmAYAFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AACgkQ +vqexgLFJGSE3eQEA4Iuandcwc1Dvas5PIp09cT8VI1qI+3Y+IYe4BRK7rb8A/iQM +WB16zNCsINRe55H/FwXyAk7cfHaNkAzRTtp2byYAuDMEXegMBBYJKwYBBAHaRw8B +AQdAQvnurKGUaemX/DTpmpSE5NtGyfxLWgW9WSvZbbbR+DOIeAQYFggAIBYhBBwb +wAep9geqgVLAQL6nsYCxSRkhBQJd6AwEAhsgAAoJEL6nsYCxSRkhLj4BAOMBgQBj +h8SJEOM6RqWT5SXb8HiDfdZqvgr8nCtffEewAP93G3tS+owZ3m4bTzkeBzTvay/7 +eq23AcJprL+sedUTBrg4BF3oC/ASCisGAQQBl1UBBQEBB0C1S8DIQiC+5dfHix3b +eFUzD3Lrq5+5UYGkmp6lh+OaPwMBCAeIeAQYFggAIBYhBBwbwAep9geqgVLAQL6n +sYCxSRkhBQJd6AvwAhsMAAoJEL6nsYCxSRkhDJQBAJse48bTxe81zjXKuMt66QKa +RnBaDsY1EGaYk4Vyb6rxAQCtmsYhDHtiE2D2oFav+UULbeqdJyIOhPEPa31Rn4N5 +D7gzBF3oC7wWCSsGAQQB2kcPAQEHQPdFLwvik9OFJ008OgdtSfe4LNlTuybXT4Pu +CuMuUgqciO8EGBYIACAWIQQcG8AHqfYHqoFSwEC+p7GAsUkZIQUCXegLvAIbAgCB +CRC+p7GAsUkZIXYgBBkWCAAdFiEEUUECRU0Kh9sHZ6HrvmoFMcGKkXkFAl3oC7wA +CgkQvmoFMcGKkXmq2gEA9M/YpMYMaXY68N3ATNnS43v5XKJE8QYtSLPCTIAuw3sB +AIidFaYoDiOtDMyCfmwLjIIopbjr9MDw8ZfeQdmdic0F8hcA/1qMXV5lVbLUEWVr +JSbdnu1QX3DupZMvS74RkPU2WfD3AP91Rlg8I0Q+GyT8F2uH6/qwGvJqCV4zhVzp +IzfFlprFAg== +=SCcY +-----END PGP PUBLIC KEY BLOCK----- diff --git a/arch/tde-deps/tor/keys/pgp/2133BC600AB133E1D826D173FE43009C4607B1FB.asc b/arch/tde-deps/tor/keys/pgp/2133BC600AB133E1D826D173FE43009C4607B1FB.asc new file mode 100644 index 000000000..2332b8727 --- /dev/null +++ b/arch/tde-deps/tor/keys/pgp/2133BC600AB133E1D826D173FE43009C4607B1FB.asc @@ -0,0 +1,123 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBFfinwwBEADNzG/Q6YTrH7oSfUERhopwCWWn/gsprtnUFK+O4enXPXQlisGt +OVNbc5GWoZibNPowjORN+kADB+ce+VBmVeh+4ZeJDjpsc+WXuVajDc0wNwG3I36m +8uNRPLMftBcxS1zUsMpwaqff5sDoqlBTwrvfLpHT0W1ecJX8Ew10zim58DzwQisR +Uv1rsGiyH/dFzs8m3jPdNjDZyyzGQK62hwp6Y/m11PiMYgGrvAa1ofjfkGRVxUgo +UUG8JG/AhGvMnHJjV923A7I8MspOm4H76wlEQLesPHJ5WPSBXTZ5jVgdWdp50fPR +JZOUT6gwkYF59SeZOcSFecdyuSb0W68/klD5PX0G8qQ5ko9beNm7Rs2aJKvY1MHU +n5rb00aulQFaYLFJ7LOTDqYDUkKYp7n4hw1X1yXO1MUYyk9J9WNO/Uo2psKXcBsd +ZjdEWj1dWHOhwswygndL7RxK/17psmod055S0uYkjA74J2eRSmPZ7ErIfUh85rQw +DZyYKh7B6AGjcpA1YyrAh6BgyJncP9x21dmip0ENrfg5rpcfHpTrOF8To8fpo4/y +vUL8kCxCCPJtkJiuXkGhV3oZsj2tWGvAclYqO7xe84vks+GgjG9Ydfga8JrvPMDz +YLX7aTDnZRiU2Z+FvtABMjmmPjAHj3hMx/o25Na4bQ7wBAPEUiESsnh1HwARAQAB +tCJOaWNrIE1hdGhld3NvbiA8bmlja21Ad2FuZ2FmdS5uZXQ+iQI+BBMBCAAoAhsB +Ah4BAheABQsJCAcCBhUKCQgLAgUWAwIBAAUCX3sbcAUJEP592QAKCRD+QwCcRgex ++1VqD/9YksvGVLhmqk5GGk25NIepvq4upKPEt3oePZK/Bj9xNTMpUvmNa0+n6lER +a9/bcdoEer8PRiTKbOAijR5rgySN2gEpjJSDTcql4q5C5RQoO11OqcC6gEBk93BG +Z2Ur2PpNchxAmNH+hkVsmZVIbCVoYFXz2uNeT/q+0CJPzUGZYA8FadPdUeZ2lwa1 +lz7I9h2gNQID+IrqV8MEpgTD207ERjdB0C8zua7J/DbnlfZN4zbjsaL/y8RCJkk3 +yG1YG2ECDF5Q8bivkcYlSSTqrMo9WAiJLK7m03qKLfyKH5M9DM1kBCqppYPKEANB +44vk++0GEyYQL2gjICkXO5XrxJAVkBm/RzKVFAMvRx0SBqCG2NiywspTiVrXRGEe ++0KQkkHI8bPPVcrLGHE+x19W6s8YWHTRJj8F1xJOBy37PW+o9OpX5cfmJosNRh4z +VZFPnuS+ytC1QNL9DxUBxgKy1UCKrlb5WTb6sQh03xDEU25uoOB9UmITk3Wd9Moq +R0F59EZ5cqN8TKdfSup94mI6ecDRPOw9akZ1LNFpbiJ5E5EAiATCd4SEh5PxBDt7 +YK6/38Ik4l8IoPinDSyJCVesJNRbWNIdwjpX31pplzK0GDE+1JLfHZJnVVD9X8ed +QQpwPIeUbMN1XFd8kQs+xwCg6QQrtjRmLjjNDf/dnbmxSWoo67QjTmljayBNYXRo +ZXdzb24gPG5pY2ttQGFsdW0ubWl0LmVkdT6JAkEEEwEIACsCGwECHgECF4ACGQEF +CwkIBwIGFQoJCAsCBRYDAgEABQJfextlBQkQ/n3ZAAoJEP5DAJxGB7H7IPIP/06D +yuBw1g5hzi3BSotr990P2kwOU7H0G9acB7wFHqQAX/m48KruaP9itxxaoZ+x1Ze7 +4KahXAI39bvR+yYfke27msKFkCMYuXFltBiLl/YLrc4Fcj/9+suq60J2cHGPryL4 +u35kcdFVXfm2TDrHef1yUNsJCw8P+qaUViD2OT4PezN/gg9uqzKJ1nIIUZAjvYND +8AMZqmB2QsXCaeWhFESzs4fDbQ5ZcbKGmSuB/e+LVrVpNOAVh5KAKUDxYNGGJ93E +37QCGp5oLbigEVuZwCMz5wktue+g4yslGwIrNfZ2EYL/grTGUKIZMjRHg6MH+1IB +UyPgJG1AY8cCj+9VO2Vvqsp0WE9duY07UxjjpF+QUI8dkIP7DlbO1JMns8NRhVpp +GuIo6R0bLLxHStZimS6h/DrDBulxNcSAziEZ7DSc0dHOLtyBjgt/kwEGqJJ9ROOQ +nBcG9/Z+pHhS1RCGvl52A4peUAusPtekzLyt/KunUuUJxNODknq60rmH1+CBbJYZ +Gi13e7gAG+6q0kMw//45poio4MhbkZ0hzv55b+37L6QrRTTV+bLbYWsobZisbwUp +ck4AK3DYj9KEClRNyzvMtqgERmNXjgTDAtJpdFtOdwP3H0DgGvtlKkJbwkH/0G3p +9uAYeLSsluk4XtpOGjUiDfbciFACAEn4DraMnuiftCROaWNrIE1hdGhld3NvbiA8 +bmlja21AZnJlZWhhdmVuLm5ldD6JAj4EEwEIACgCGwECHgECF4AFCwkIBwIGFQoJ +CAsCBRYDAgEABQJfextxBQkQ/n3ZAAoJEP5DAJxGB7H7eBwP/R3OpDnx7JtFOq22 +z0jcLjPLwmP+QqgOlIvSiqj66SplpEhPHcgf4DgBu02RwE8ONAMo6McFvUH4tvI2 +NH3X8WET32APLe8/2cxhtZpH86gdnwTu1xGMXQxz5sRppIhOtoowGWh+/e/t9owA +LOm/+IsHnxbX4ddIN6goB/mrlepRVRUODBnE0K9oZG7VnnrB73Ip0+hqaDVmiGdO +n7LSggl7ip7VZ5hUHXwvHg3dUknKapucMXFCaqdelvYFt3NYQ2ZROAsAVLdi4k2d +Y9/WGNCgFHbdSGurJ19yGwttv57t+GUsG3OXHEIMq52dkM4LOnbdVR2miV/jhFQ7 +J6i+mjZ5tYJiwrX9uFSOSzHbjWVCq5tlj1OHs18s0zDO523p2YWS2LWaiDpThnRU +092iGsNJZHaJmzA0T+7Ti/uaqqY9CjshYSBdi0XUQ1LowzWDfBsVjV/u+BN80FYo +szJzTAmiJW3GOrxbkhdb4nYptPKmY4YSSlLffOQ0y9Y+eUYMGe23xhejsYITS6TH +OunWmb/jlgK12Rd8AyrZVtD64szxAYqSXJ9rx/k16KIl1z7JzJIRzBIrdHe8HTtu +y9zs/oQgICPMrotKF6TCjHkH7prZFcCF09IjRcc8ihpZ/C991HS4X4pN1MdQMuEI +WVIAjxKh++gMYYzMjXUqBsjXjuBhtCVOaWNrIE1hdGhld3NvbiA8bmlja21AdG9y +cHJvamVjdC5vcmc+iQI+BBMBCAAoAhsBAh4BAheABQsJCAcCBhUKCQgLAgUWAwIB +AAUCX3sbcAUJEP592QAKCRD+QwCcRgex+yGnD/96O7SIy+Ve+xNuJvxvhjZDzibl +ME8SaQqH3iGLYpADbtvz1aEZEbaAUXMTs+yu0zRFtX0i8bYocy9QrvNCwepb1qeD +pQd4IE2nFZgyTOMf6cjy3ITR8xhpWk1OVwLX91pnXkEN13As8xrLGr1+h+nM/ni3 +c56HDeWDihQwqTHhBJoNorrH+/nKtzZBNhfG0myiM/b9GxCH2YbOgMRIC9JuCPyg +WOWVytOTysQWSKiIIvL/oMnW5DTGa5xXVt+iTdxTgLc+9+6pMkg/hVGHG3j4Af3w +U1/H7bQMCNb+jz+txnCYV21t7ACouaQAMx+WYZD36hqXq+f5v9NRufXO667DaM7K +q9UvQHGD0pIPM9TlOsshTl4AzBHAJIB4ixGscZR3H8cIlgbQye92GmgdJkw2x0UJ +5WaU4J9g3iMnLeIA4j09Qmf5H8wXrTpLz0yTB/S1ESVjVv3BJSUhyn04rM/uDvfa +wHUp8d4j1bstdGxepNFxrWlsK9zUV1olAJ8UZeC4sRmky2EbbF+Q9qXQuGpnWuJk +7KyKyg9gJkJcbUCrsU2st1Gsip6pJ1TGTAVJMj4wInC90xQ2elnHm1AMjiTBBxY4 +g16GRoAmBolAmaEmkkJq/YfPM1Xpie//E3gjx75669abyKkmKAgckXgLJWjUVWu6 +JO3C810ImbNLySDEMLkCDQRX5TdLARAA43qD2AMaEUiock0YF+QMB3tfMn91qwwi +qOI6umOCev3RMeUzkdd+5pYJVX5i3WQCwjjChPzDucC82z/m/wGrtphCCx4wyx2U +ec0JzNXKjKfEDBMne0MwTncrPiwuy7k1UJD25n1n8ZwkcDwBE5snYZE5qAUTE84h +6uIYPJgVYM6AKYiMHP1VRPU83YM5alMA+OffSThmlZ43+Gd/1X5aQ4xtRokV58Kw +hTkTEWFUJmfcnroz5i6ZyUiWfLERmAuz7Ez8SXjvWtfdsebTPzlc6P/BfvfMgqnC +zem5wgU07w9cgUaNrlHNBU0z2eGkrrE696VofMOxfixvkguzZjjHxtlidTT32w7V +UYKF+f5jRlC6l0tQ+eyGLl1dPLMFOJi4G4o+KEZSCb9rCwyYB1JEHy+pkBMOe9rK +NHDqPSDUB9YMkE9WpQNjlevO0mRaJ/HpEXcJYJ1KattxGtVXKhZMHHdqWwi9MBSF +koThohK/PLl2gxFXIwRuGocSFt9Ea362g0QeY93EgMsjtXr4JnUTDBc1AjArkw1Y +uu/VBB7GurNVV1zG5DP8/3WAsPGgKgGLwcEawD8cv4ZV3mhbVTWjxTeabVK8tJ6D +4wVaaJKlI4alL1p0o/BHIbL6CIZGcJYkfZ1ydxJ8H1Ldc6KaGqE3LcRv3y22CXYC +BpQM7wzoa78AEQEAAYkERAQYAQgADwIbAgUCX3sbpwUJEPvl3AIpwV0gBBkBCAAG +BQJX5TdLAAoJEGr+5tSekrYB/5AQAK5d+GWYBO6NccLmgymjpNZZSk0mTyvf3qx0 +nOWxGYT5JP9s5oykm4IK59RdUm6lfpLRe6hZXcrLEXZvREg3MCqOMHDjaTJygC8C +uv/JL7y5unc2/0fAPtYFYYgY/JLkwsOPiLIv0deidUDm1PelBBcFpJ3JtiEOfg9w +4j/duxDo+F+UdMWGm5GngGFx4vrCFBSAaqhcY712my8KOIJXWOqtk631maG9XcfD +BfjfuHvSd7jsiQkQ7g61h+Vbiq4+7vq9H4ikFUiRVVQ8JA+KmCcSWUZXVKflmHLT +EbU1qTOr1ueWqfDbIiXSsVtrrncObWhL2snlZFxnBzPXtgKwJUks0T5U/D8Q37nL +V23JnGk+f/SO9LzI+2GE7DTvllV0HLaTa6///lwQ9HZ4D7i9kSmZEPnI/YHwYqpN +Pz//reJ/M4CoqWfFDzTRlBX18M/2d1pcc8kIEcncrWfMSg+16GAXTPusKt34z12g +a4KZKIm+KDTeJOzL9xUpMX4Gc4IORzmQyVTzMyw6aOLNjeTpVSritb2wfvRbmUsD +7GdPMlhPL6xQRXnorhuoV/9NfKbuZVb3FjfcGEVHY/i28j1Vd332U91u8lYqD14m +RiVwcoC/qV0sK6/zPd/g4bp5xmNkjW2vr3qVQw3ckV4wlTMcl7/tRXLZj4DFHRJd +hz3Q5fjvCRD+QwCcRgex+0I0EAC8cLhf7PXIhn13WSIQRsGt9hPor4TmbyLq2uEM +n8zcHFA9xXlmXwmq8d9zx5yJKenloWluk2lIw0YxaO+oPFgIjz86Rta66VxdbvNM +xpnyH5F1GJ7uFq+MEZ8ysJgHBBfYEfCteOGhsTCcJ85fZWwi3SL8n/GlERDbUq9K +/GSGVZAZrlhc6NR0P3nWRm7DrUddqMNAWxnOkv9Exf+f6o5+PdhRvknv/nkCzhix +6228Bbe0rOiwLEIpwq4Andnh+soXRffvgU59San+dwo5e2xdwtVi6BWEea6FPDLv +A03csKT7jcQPdmDFHRXuzKQ9TK2QspMQKRawJCiE8E3o/mBpXXJjY6ddAZebqo7L +9Zy4aZF9Ibxu2yc5IZumB8cjtMrvwAtKS8Ov+aAQSwX2SDFoDSxaxQmxZrKH/ssr +8DepBmnwlVTfAC4p2hq1Xu3cTOc516DvzpqHHmUnoWPMHb3Ri+Bfg7KelqX5qCeF +/GV/1ikJmw6HjorrPL0yv0m2rM2nYh9gZagQBrOyBz7DxFSZOgeLP4PvPggcl0f6 +I0eyVR9J/WxIBYERBbF3wjWv5HTNfdVr5O6T+olg7TkTIudVto4BU+Mu8/xI07QW +fQSgZ4C1nbHqlsJoNYiSeMNTqXdzC75SezXWtKRjZxVXh4pUPY86ovIZ6MOYoLx9 +IVyUtbkCDQRX5Ti2ARAAnHWApVnCMmgWEXtMndUAknsl/CQaXFc4X7dNHuGF2ZXd +bAjTX0LHhxRXbU/vNUtiq3SNv6I8ArdpIWNOsJBnBSC98z6z4bhvJLqLp9sz1foz +wcoa5OpNEgoZoWNmUn+5sGcf8LJikUPfda0Qwm/XAFrPgQzerVE4uw0C6MITNYPw +9psbtq1Aog2enbNfOko7UDCAtg8k+tsoUnPi6xil03xQtKclLMjGoyiIkBNFWeKW +dgKlwl5CdzZXdsf9+0Sba0pIxFm5F58+CCIxlmfm4SZOUF3IcwYUr6G6o/nWvDUR +y8iLwHHLrlihONAO+s+4q0Dqk5A0rlcRN/NaWfAFrW0blDGEiD4CoQkUn0AfWH+M +9/L1kZ4Tg9b88kNrxed63q52EipzIqtc2XJz4K7+4txNL/YsHsGASi4orBtile/Q +txmWSSRRvxuIUspbhsjH37xhxl0BZRlAa8H+M5zGrVhHkp7WN3p589vsFNMAz8Mv +Z0ifAQQmRLlL55y64pYedX7SIzPHNRSQJ6ERDhqld6NNHBtZ74f143VrUwo8aBNm +tz3yGGtVv6FJPQ+XXZ9xj3hui2eTZVrWTN4BRFieVvBYAO1sK00H+KdQiM4zErwX +Sgiy7+L6UL+r7jHRXTADmUyyjBaPVDkD+yH4xqHz+/tCHYsaSMY4ffFVsTovvqsA +EQEAAYkCJQQYAQgADwIbDAUCX3sbwgUJEPvkjAAKCRD+QwCcRgex+z/6D/0d9B2H +oMt5hc9S9MMRRhVQeWRnDrVKMc9DLhIwwFPPusAt4G7FilHspPMtoJ22OIcEYZKC +wSZC2j8Yt1PhW3bnOnHa7Er+06rTjU9hFFxn9orrsz83YIOZywLOL2yboew4omRk +jBUiJDXRRnVhPwUR0Lz8rPCfGCa0b+IbbznZ0NLsCvnkYi5iMShvp6ZNszxnkvbW +8+8lGnG6+yoSIwwD87KL2PDGENUIcv5rulZJHmFm7K8kThbnNTeWhmsuDuR7PNt2 +FZwQQ0s+It3DqZ7GFR5eBPmedTBwt7p4VzpUdRQ7ZDS9cXaYId1As4IanKQvQNbH +G2HTujQ5KpMogB4PCyHlg7d1gnpXlRhW7zjEF7lQXlFnlcNZjI1uJ+suJW1vnQ4F +Yt6TBq793ZWquWZYloassnwH2bFY3zNxajNm1A0NVKjwZTcvwthj1JvacHE4BdFU +LK4/DJ5Bwdqa+5aiRpSeJq+ARwQRc/ZEuU90k4XpBXSLaZdzkAWr8J/KVk61FnlY +e8BKq+1Pmu6VD+hnru//RYgtMNheHfgPy6QRTjRY1PhwvRcdxcwuFknUBBQ6fb3h +obVvbPc3QOsbHn8xyxzPmpM7a1+9szXqNu22sV+O4Ya+5MGcS1JokyFVWa10WD0y +wwDAcynzMET9pI0MXmqY1qKjlMQVc7lb4FLeXw== +=y/Gu +-----END PGP PUBLIC KEY BLOCK----- diff --git a/arch/tde-deps/tor/keys/pgp/B74417EDDF22AC9F9E90F49142E86A2A11F48D36.asc b/arch/tde-deps/tor/keys/pgp/B74417EDDF22AC9F9E90F49142E86A2A11F48D36.asc new file mode 100644 index 000000000..b3a6bfaca --- /dev/null +++ b/arch/tde-deps/tor/keys/pgp/B74417EDDF22AC9F9E90F49142E86A2A11F48D36.asc @@ -0,0 +1,51 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQENBE3KySMBCADOeaVfjDRP3kb2YaDyZbEjPKXkIJivkBbEt9E5abcuipmIA8o6 +W+eYbnRDUZr0u/a6NjEhG35yNFRWpFpi4Gby9+0xjNvGjFj+hTjROFsph3ljGFKp +yYfJQejlFEjlub/7ehNdVrwJz5WnIpNz1UnoC7/rry6HzBtKIcXbEpLTnGAoqAmY +d78cv5h+9B5WzN48/63qIns5ZkzAZIQio3Y+n8B80NXDOiTh+9cFPfAk4xBVPIYk +8dDpCGeHA8E7htJsAkgn4A3wsxEwwKVf4AD5+E622BWYabFyCWetpNIBDsRAm2Di +s7LtxC7SRWd/e/91axtQ5u1bHFliVkRRbn9VABEBAAG0IERhdmlkIEdvdWxldCA8 +ZGdvdWxldEBldjBrZS5uZXQ+iQFTBBMBCAA9AhsDAh4BAheABAsECQoEFQgJCgMW +AQICGQEWIQS3RBft3yKsn56Q9JFC6GoqEfSNNgUCYk7b+QUJFmVGVgAKCRBC6Goq +EfSNNiH0CACJCNbyooaIGDEJ6sNkwrwh9DZZFs+qyafJqz7KXd3d2MXcnlgAw6O2 +DYCAy6hlKNaANWQSFeYTjsoIWf7wC8fFnaWJscPx6+ZE8beUlQMiyzk0KQg8ie7x +Bfnl9Lmh4cnH+4b5A+A3GO8JrWf+gNAi182WJzq62SX7gK7EUT3H9oS3FSbhwYLS +Yf7WQMWpWJ6dS7PbUr78J8XiJDvm6GvEMMC34/aZTeRdhntNOu1B2tybA4BwxbuI +KMa8nneqd/lgXXTA3nFRbO6V/PiFcjoABNEUgqTDpgKypcl9GZ15D/sINX6wuIFf +519Qq1PWtmBZ9xPNHyzXt3wfA/88ticytCVEYXZpZCBHb3VsZXQgPGRnb3VsZXRA +dG9ycHJvamVjdC5vcmc+iQFUBBMBCAA+AhsDBQsJCAcDBRUKCQgLBRYDAgEAAh4B +AheAFiEEt0QX7d8irJ+ekPSRQuhqKhH0jTYFAmJO2/kFCRZlRlYACgkQQuhqKhH0 +jTZFnQgAkRdS72duGL5hSy7zOOmdIDzVWoLa400Qy8fxpFdC55TlQq3HVt3H/3uU +hGLkTzs+a6RD5VjFQI4z+cJBEcRYDwUkcQJv5SpDwutydkGuag6e+XCWtr3BeYkL +FXnBt/Dc4K15UzX6Uzo2rNY0CozoIfHaP+pPek9nYjIWFhkLwHoW5Cz4ay+vZlU8 +sKq7WFD10CRj/QcT7RyPrjtrpniSciWz4ralW95vnaHyRVHhPH+sTu2R765L521q +cnyptEE8x8+Wi47/2Er8bUqFQMakbLirFObuigOMSNyPB2fmD6wgXol38LzBOVgM +GtKirzehwyK2wcOuidfSVFEPlr5Hx7QhRGF2aWQgR291bGV0IDxkZ291bGV0QHJp +c2V1cC5uZXQ+iQFUBBMBCAA+AhsDBQsJCAcDBRUKCQgLBRYDAgEAAh4BAheAFiEE +t0QX7d8irJ+ekPSRQuhqKhH0jTYFAmJO2/kFCRZlRlYACgkQQuhqKhH0jTYVOwf/ +c5KA0BLCJ8V+zFTkQLSEKD/RfCkuRdC1fpNH2fuXZ6W1BKBRxFmVi4+lD+ij4BbN +TkWhifAGE+Xe4llnTRZZMlV+7A0/m98jsjS1P9QoLj+VwkEbNQ6k9ZoZM+rfqHut +3uTYp699rlE2HWsjQLjMgNyKfbipi+x9ZF2mVG1fbco43YiHFSL3S5WBn7vOiHCk +XNgmHpA8grJE2ecUEZWFWKqz3SJADCkMKoulOFhLtDPeWh5bJBfqBD5tyrzXR1u/ +zz1AXo0fP1QF1dRWQCcrvfnLoP7PsECUUM1TuBw/yyE35/1Z0nyR81f9Bab3t3cH +1e6wEdZfzeMIEiTQoz4qurkCDQRSL5QtARAAtVN7/CeTT7uJsUzQf/2a+fq1IVQW +N3JPTZjDNQeSB/V8W0R83QH32awj1uvSljCtCKbtTrDj0foz+CBRHe4aJgm2iAzM +xKY1SxJ+SBTVyAYVQ+orzIvzqi2URzAfTII/mmvFdZEuS67hkbHXFnTLlXj9m3Sd +WRpCIQlwLCFERvMdr+sPQ07HcUDpoASPgo6P2cJgidaxBgfasUTvru3dxeidjRbv +5defzcdsBqk1eAZ/G/YFOQUiGig60/G2SOlBR7HVmD/iVkSun6j18vPKpqr0VJ3s +HGUO+KhJrc35QQ7C0ezYtOg6fhaO8PzOcMovnk/P0DGkl1Y3uG4d+h3IDVBA1fTa +X/joVSBVtddLiNkOwgKxw6OH+jjq/irXl6X/0LqNW/FdgK23fEsA0mv4vrUR0ulD +tsPagk3np7DgS5J/v+npGARoeLoj5QjyK4+/1RjMXq+DYW3piADJLW55xH4y6M+O +Ypu9svQ60vr2Ae+3pNL7q/mppdixc/isXbOsjtoGSb5QUUOXbzhDWX960JbyjZUn +9Iao+eZRV11tMbMI4pWuL8JEWj8qpcnIyJhYi2hSf7TVq/Zw+PvEXkEAnpq3EMyN +4Su9I1ZWoxyTiwZVMdOn6TEnkdfxB9aTd5vYvR9L+t5SpmXLBMXQygbg9xR1Gbh5 +EHVlhAobb0uSkYsAEQEAAYkBPAQYAQgAJgIbDBYhBLdEF+3fIqyfnpD0kULoaioR +9I02BQJiTtxDBQkSAHuWAAoJEELoaioR9I024lwH/1UtASIiEoZKhuVkv55bjo3w +422w3wwJTC5kooG1TOWmtHOo/JJ1rFxcIpkY6ftnC+p6YhEbxxk/3XAZtUNRsJ9Z +qemhp331AGq/44g/OYAZkQiNyNhjftj6JafvgU1Zauzi7w0xqhLMKBMDV09vcbPe +o+axUj7cvibHxYUUC2RWqkBxegXpa+Cq4YKpEEbXh510mwK11sUyxcPxsrkZhr97 +KdgY8RedpPDAxnQBGU7dIMDc3xVIX1uXXZpY+SyJb7QAMGTW+9jDPwDUeUYanV+e +RwLotrkvSgKJ9GQ2F3Am0axV8iqob7unvbKYTtQcIR2P9X52sT0Pytt44W2KxH0= +=Aw5d +-----END PGP PUBLIC KEY BLOCK----- diff --git a/arch/tde-deps/tor/tor.service b/arch/tde-deps/tor/tor.service new file mode 100644 index 000000000..f91b63a08 --- /dev/null +++ b/arch/tde-deps/tor/tor.service @@ -0,0 +1,35 @@ +# tor.service -- this systemd configuration file for Tor sets up a +# relatively conservative, hardened Tor service. You may need to +# edit it if you are making changes to your Tor configuration that it +# does not allow. Package maintainers: this should be a starting point +# for your tor.service; it is not the last point. + +[Unit] +Description=Anonymizing overlay network for TCP +After=syslog.target network.target nss-lookup.target + +[Service] +Type=notify +NotifyAccess=all +ExecStartPre=/usr/bin/tor -f /etc/tor/torrc --verify-config +ExecStart=/usr/bin/tor -f /etc/tor/torrc +ExecReload=/bin/kill -HUP ${MAINPID} +KillSignal=SIGINT +TimeoutSec=60 +Restart=on-failure +WatchdogSec=1m +LimitNOFILE=32768 + +# Hardening +PrivateTmp=yes +PrivateDevices=yes +ProtectHome=yes +ProtectSystem=full +ReadOnlyDirectories=/ +ReadWriteDirectories=-/var/lib/tor +ReadWriteDirectories=-/var/log/tor +NoNewPrivileges=yes +CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE CAP_DAC_READ_SEARCH + +[Install] +WantedBy=multi-user.target diff --git a/arch/tde-deps/tor/tor.sysusers b/arch/tde-deps/tor/tor.sysusers new file mode 100644 index 000000000..1f039ff57 --- /dev/null +++ b/arch/tde-deps/tor/tor.sysusers @@ -0,0 +1 @@ +u tor 43 - /var/lib/tor diff --git a/arch/tde-deps/tor/tor.tmpfiles b/arch/tde-deps/tor/tor.tmpfiles new file mode 100644 index 000000000..ed8beb4b7 --- /dev/null +++ b/arch/tde-deps/tor/tor.tmpfiles @@ -0,0 +1 @@ +d /var/lib/tor 0700 tor tor - - diff --git a/arch/tde-deps/tor/torrc.patch b/arch/tde-deps/tor/torrc.patch new file mode 100644 index 000000000..0f3c849a4 --- /dev/null +++ b/arch/tde-deps/tor/torrc.patch @@ -0,0 +1,28 @@ +--- a/src/config/torrc.sample.in 2021-03-10 19:59:10.123456789 +0100 ++++ b/src/config/torrc.sample.in 2021-03-10 19:59:10.123456789 +0100 +@@ -11,6 +11,7 @@ + ## + ## Tor will look for this file in various places based on your platform: + ## https://www.torproject.org/docs/faq#torrc ++User tor + + ## Tor opens a SOCKS proxy on port 9050 by default -- even if you don't + ## configure one below. Set "SOCKSPort 0" if you plan to run Tor only +@@ -39,7 +40,7 @@ + ## Send every possible message to @LOCALSTATEDIR@/log/tor/debug.log + #Log debug file @LOCALSTATEDIR@/log/tor/debug.log + ## Use the system log instead of Tor's logfiles +-#Log notice syslog ++Log notice syslog + ## To send all messages to stderr: + #Log debug stderr + +@@ -50,7 +51,7 @@ + + ## The directory for keeping all the keys/etc. By default, we store + ## things in $HOME/.tor on Unix, and in Application Data\tor on Windows. +-#DataDirectory @LOCALSTATEDIR@/lib/tor ++DataDirectory @LOCALSTATEDIR@/lib/tor + + ## The port on which Tor will listen for local connections from Tor + ## controller applications, as documented in control-spec.txt. |