All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- support for enabling
SafeSocks
option by assigning1
to environment variableSAFE_SOCKS
(instructs tor to block socks connections when provided with remote ip address instead of domain name to detect dns leaks due to applications resolving domain names without tor)
4.5.1 - 2022-02-27
- "sed: write error" for large values of
EXIT_NODES
andEXCLUDE_EXIT_NODES
4.5.0 - 2021-09-06
- added ability to select exit nodes explicitly via
EXIT_NODES
environment variable
4.4.0 - 2021-07-07
- added ability to exclude exit nodes via
EXCLUDE_EXIT_NODES
environment variable
4.3.1 - 2021-05-15
- create prerouting chain if not already created by container runtime (fixes dns proxy with direct routing & transparent proxy on some hosts)
4.3.0 - 2021-05-07
- when running entrypoint as
uid=0
: addnftables
rule forwarding udp dns requests (port 53) to tor (alternative for less flexibledocker run --publish 53:9053 …
)
4.2.0 - 2021-04-30
- when running entrypoint as
uid=0
: addnftables
rule redirectingtcp
traffic to transparent proxy
4.1.0 - 2021-03-03
- enabled transparent proxy, listening on port
9040
(requires netfilter rules) - image labels:
org.opencontainers.image.revision
(git commit hash via build arg)org.opencontainers.image.source
(repo url)org.opencontainers.image.title
4.0.0 - 2021-01-01
- healthcheck: replace periodic http requests with probing network-liveness to improve privacy (keeping dns requests for faster updates)
- changed log level of
control
domain towarn
(to avoid log spam by healthcheck connecting to control listener) - added message domains to log messages
curl
bind-tools
package includingdig
3.0.0 - 2020-10-03
- create mount point at
/var/lib/tor
to be able to make container's root filesystem read-only
- moved tor's data directory from
/home/onion/.tor
to/var/lib/tor
- run
tor
as usertor
(uid=100) instead ofonion
(uid=101) - docker-compose & ansible-playbook: read-only root filesystem
- ansible-playbook: drop capabilities
2.1.0 - 2020-09-27
- enable tor control
listener on port
9051
(listening on loopback device only)
2.0.0 - 2020-03-24
- changed DNS port from 53 to 9053
- run as unprivileged user
1.1.1 - 2020-03-21
- fix invalid torrc path
1.1.0 - 2020-03-21
- change
SocksTimeout
option by setting$SOCKS_TIMEOUT_SECONDS
1.0.0 - 2019-10-12
- tor socks5 & DNS proxy