Opened 13 months ago

Last modified 5 months ago

#31153 new project

Create a "tor-bridge" Debian meta package

Reported by: phw Owned by:
Priority: Medium Milestone:
Component: Circumvention/Obfs4 Version:
Severity: Normal Keywords:
Cc: u, cohosh, phw, mrphs Actual Points:
Parent ID: #30471 Points: 5
Reviewer: Sponsor: Sponsor30-can

Description (last modified by phw)

Installing an obfs4 bridge on Debian currently requires installing tor, obfs4proxy, and then figuring out how to configure it. We could create a meta package, say tor-bridge, that simplifies this process. This package would:

  • Ship with a script that automatically determines a free and random OR and obfs4 port.
  • Help us retire a transport by replacing, say, obfs4 with obfs5.
  • Ship with a tool that helps operators get their bridge line.
  • Write its torrc to a different file than the tor package, to be compliant with Debian policy.
  • After installation, ask the operator about their nickname, contact info, and if they want a vanilla or obfs4 bridge.
  • Maybe ship with nyx so operators have a sense of how their bridge is doing.

I hear that infinity0 already thought about this problem a lot in the context of tor-bridge-helper.

Child Tickets

Change History (11)

comment:1 Changed 13 months ago by phw

Description: modified (diff)

comment:2 Changed 13 months ago by irl

Status: assignedaccepted

Debian bug 932901 is tracking the inclusion of this in Debian.

http://bugs.debian.org/932901

comment:3 Changed 12 months ago by gaba

Keywords: anti-censorship-roadmap-october added; anti-censorship-roadmap removed

comment:4 Changed 12 months ago by gaba

Keywords: anti-censorship-roadmap-august added; anti-censorship-roadmap-october removed

comment:5 Changed 11 months ago by eighthave

I think a better way to handle this is writing scripts for server automation software like Ansible, Chef, etc. @uniqx has done just that for obfs4proxy using Ansible:

There is an in-depth explanation here:
https://guardianproject.info/2019/04/16/exploring-possibilities-of-pluggable-transports-on-android/

comment:6 Changed 11 months ago by irl

Many different ways have different advantages and disadvantages. There is no One True Way™.

comment:7 Changed 11 months ago by gaba

Keywords: anti-censorship-roadmap added; anti-censorship-roadmap-august removed

It is leaving the roadmap for now.

comment:8 Changed 10 months ago by mrphs

Cc: mrphs added

comment:9 Changed 10 months ago by irl

Owner: irl deleted
Status: acceptedassigned

comment:10 Changed 10 months ago by irl

Status: assignednew

Admitting this is something that I'm very unlikely to have time for.

comment:11 Changed 5 months ago by gaba

Keywords: anti-censorship-roadmap removed
Note: See TracTickets for help on using tickets.