Opened 3 months ago

Last modified 6 days ago

#31153 accepted project

Create a "tor-bridge" Debian meta package

Reported by: phw Owned by: irl
Priority: Medium Milestone:
Component: Circumvention/Obfs4 Version:
Severity: Normal Keywords: anti-censorship-roadmap
Cc: u, cohosh, phw, mrphs Actual Points:
Parent ID: #30471 Points: 5
Reviewer: Sponsor: Sponsor30-can

Description (last modified by phw)

Installing an obfs4 bridge on Debian currently requires installing tor, obfs4proxy, and then figuring out how to configure it. We could create a meta package, say tor-bridge, that simplifies this process. This package would:

  • Ship with a script that automatically determines a free and random OR and obfs4 port.
  • Help us retire a transport by replacing, say, obfs4 with obfs5.
  • Ship with a tool that helps operators get their bridge line.
  • Write its torrc to a different file than the tor package, to be compliant with Debian policy.
  • After installation, ask the operator about their nickname, contact info, and if they want a vanilla or obfs4 bridge.
  • Maybe ship with nyx so operators have a sense of how their bridge is doing.

I hear that infinity0 already thought about this problem a lot in the context of tor-bridge-helper.

Child Tickets

Change History (8)

comment:1 Changed 3 months ago by phw

Description: modified (diff)

comment:2 Changed 3 months ago by irl

Status: assignedaccepted

Debian bug 932901 is tracking the inclusion of this in Debian.

http://bugs.debian.org/932901

comment:3 Changed 2 months ago by gaba

Keywords: anti-censorship-roadmap-october added; anti-censorship-roadmap removed

comment:4 Changed 2 months ago by gaba

Keywords: anti-censorship-roadmap-august added; anti-censorship-roadmap-october removed

comment:5 Changed 5 weeks ago by eighthave

I think a better way to handle this is writing scripts for server automation software like Ansible, Chef, etc. @uniqx has done just that for obfs4proxy using Ansible:

There is an in-depth explanation here:
https://guardianproject.info/2019/04/16/exploring-possibilities-of-pluggable-transports-on-android/

comment:6 Changed 5 weeks ago by irl

Many different ways have different advantages and disadvantages. There is no One True Way™.

comment:7 Changed 4 weeks ago by gaba

Keywords: anti-censorship-roadmap added; anti-censorship-roadmap-august removed

It is leaving the roadmap for now.

comment:8 Changed 6 days ago by mrphs

Cc: mrphs added
Note: See TracTickets for help on using tickets.