Changes between Version 8 and Version 9 of doc/TorBrowser/SmartOS_Sandboxing


Ignore:
Timestamp:
Mar 4, 2016, 4:57:23 PM (22 months ago)
Author:
dawuud
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • doc/TorBrowser/SmartOS_Sandboxing

    v8 v9  
    276276
    277277
     278== onion tor zone ==
     279
     280This zone will run tor for our onion service.
     281We could use a Solaris or Linux zone since tor works in either one.
     282Here I'll describe how I do it with the latest Linux debian-8 zone:
     283
     284'''lx-onion-tor.json'''
     285{{{
     286{
     287  "alias": "lx-onion-tor",
     288  "brand": "lx",
     289  "kernel_version": "3.13.0",
     290  "max_physical_memory": 400,
     291  "quota": 10,
     292  "image_uuid": "445d04f4-cad6-11e5-a1a0-9f6c0ce02707",
     293  "resolvers": ["8.8.8.8","8.8.4.4"],
     294  "nics": [
     295    {
     296      "nic_tag": "switch0",
     297      "ip": "10.0.0.10",
     298      "netmask": "255.255.255.0",
     299      "gateway": "10.0.0.1"
     300    }
     301  ]
     302}
     303}}}
     304
     305{{{
     306vmadm create -f lx-onion-tor.json
     307vmadm list
     308UUID                                  TYPE  RAM      STATE             ALIAS
     3095b2707ac-6175-45b4-d618-92802e3870fd  LX    400      running           lx-onion-tor
     3105d9ab9da-8aae-4a48-b73a-b7ae574a5dd3  OS    500      running           firewall
     311}}}
     312
     313update and upgrade
     314{{{
     315zlogin 5b2707ac-6175-45b4-d618-92802e3870fd
     316apt-get update
     317apt-get upgrade
     318apt-get install tor
     319}}}
     320
     321
     322setup our torrc with our stealth authenticated onion service
     323by adding these lines to '''/etc/tor/torrc'''
     324{{{
     325HiddenServiceDir /var/lib/tor/hidden_service/
     326HiddenServiceAuthorizeClient stealth client1
     327HiddenServicePort 6001 10.0.0.8:6001
     328}}}
     329
     330{{{
     331systemctl restart tor
     332}}}
     333