Greetings list,
a few days ago, Elias Papavasileiou did a "Setup your own Tor relay" workshop in the Greek open source conference FOSSCOMM. I attended the workshop and helped out a bit.
During the workshop, a presentation was given describing how to setup a relay, and then we moved to hands-on, where we helped 3 groups of 2 people each setup a Tor bridge in their laptop. Even tho a laptop is definitely not the right platform for this, the idea was that if those people learned how to setup a Tor relay/bridge they could afterwards set it up themselves on proper hardware.
A few takeaways:
- Setting up a Tor relay is not easy even if it's just "apt-get tor, edit torrc, reload tor". There are various things that can go wrong in the between, and basically all groups asked for assistance even tho they all seemed experienced with Linux system administration.
- Example of fail: One group put a wrong line in their torrc (they tried to launch with a low-port ORPort of 443 even tho they were not root), then had trouble debugging what's going on, then wiped logs and ran Tor manually as root. Tor overwrote the log file, permission issues occured, and Tor could not start again. We had to manually figure this out and remove the bad log file for Tor to work again. That took a while.
- Example of fail: People kind of gave up reading all the comments in the Debian default torrc and asked us for assistance because they did not know what they had to do to make it work. aka what was necessary and what was optional.
- After about 45 mins all three groups managed to successfuly run a bridge.
I'm just mentioning these things here in case someone can relate and improve the situation. There might be a few things we can do (aka improve the default Debian torrc), or even provide images/docker/vagrant for relays. But I'm not good with these things so I can't really suggest things.
Cheers!
Hi George, dear all,
i can imagine a tor-setup-guide. I mean when you apt install tor you should have an command like tor-setup (or whatever) which starts an "gui" inside the terminal window and asks you some basic questions. For most people there are a few questions like "What do you want to run? A) Relay B) Bridge". Based on those questions/guides the torrc will be generated and the script configure the tor-user and data storage and what ever needs to be done afterwards.
I hope I explained myself well enough. What do you think about it? I can imagine to help developing this setup-routine when winter arrived in Germany ;-)
Of course it will be for beginners because experienced people will manually edit the torrc.
Best regards from Germany Max
-----Ursprüngliche Nachricht----- Von: tor-relays tor-relays-bounces@lists.torproject.org Im Auftrag von George Kadianakis Gesendet: Mittwoch, 17. Oktober 2018 15:23 An: tor-relays@lists.torproject.org Betreff: [tor-relays] Tor relays Workshop in FOSSCOMM
Greetings list,
a few days ago, Elias Papavasileiou did a "Setup your own Tor relay" workshop in the Greek open source conference FOSSCOMM. I attended the workshop and helped out a bit.
During the workshop, a presentation was given describing how to setup a relay, and then we moved to hands-on, where we helped 3 groups of 2 people each setup a Tor bridge in their laptop. Even tho a laptop is definitely not the right platform for this, the idea was that if those people learned how to setup a Tor relay/bridge they could afterwards set it up themselves on proper hardware.
A few takeaways:
- Setting up a Tor relay is not easy even if it's just "apt-get tor, edit torrc, reload tor". There are various things that can go wrong in the between, and basically all groups asked for assistance even tho they all seemed experienced with Linux system administration.
- Example of fail: One group put a wrong line in their torrc (they tried to launch with a low-port ORPort of 443 even tho they were not root), then had trouble debugging what's going on, then wiped logs and ran Tor manually as root. Tor overwrote the log file, permission issues occured, and Tor could not start again. We had to manually figure this out and remove the bad log file for Tor to work again. That took a while.
- Example of fail: People kind of gave up reading all the comments in the Debian default torrc and asked us for assistance because they did not know what they had to do to make it work. aka what was necessary and what was optional.
- After about 45 mins all three groups managed to successfuly run a bridge.
I'm just mentioning these things here in case someone can relate and improve the situation. There might be a few things we can do (aka improve the default Debian torrc), or even provide images/docker/vagrant for relays. But I'm not good with these things so I can't really suggest things.
Cheers!
_______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
tor-relays@lists.torproject.org
-
George Kadianakis -
Michels, Max