🧅🧅🧅

.github/workflows/test.yml

@@ -42,6 +42,7 @@ jobs:
           - logging_test.py
           - ln_basic_test.py
           - ln_test.py
+          - onion_test.py
           - plugin_test.py
           - rpc_test.py
           - services_test.py

resources/charts/bitcoincore/templates/pod.yaml

@@ -98,6 +98,9 @@ spec:
           value: {{ .Values.metrics }}
         {{- end }}
     {{- end}}
+    {{- with .Values.extraContainers }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
   volumes:
     {{- with .Values.volumes }}
       {{- toYaml . | nindent 4 }}

resources/images/tor/Dockerfile_tor_da

@@ -0,0 +1,18 @@
+FROM debian:bookworm-slim
+ENV DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get update && apt-get install -y tor iproute2 dnsutils
+
+RUN mkdir -p /home/debian-tor/.tor/keys
+RUN chown -R debian-tor:debian-tor /home/debian-tor
+RUN mkdir -p /var/log/tor
+RUN chown -R debian-tor:debian-tor /var/log/tor
+
+COPY ./tor-keys /home/debian-tor/.tor/keys
+RUN chown -R debian-tor:debian-tor /home/debian-tor/.tor/keys
+COPY ./torrc.da /etc/tor/torrc
+
+COPY ./tor-entrypoint.sh /entrypoint.sh
+
+ENTRYPOINT ["/entrypoint.sh"]
+

resources/images/tor/Dockerfile_tor_relay

@@ -0,0 +1,16 @@
+FROM debian:bookworm-slim
+ENV DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get update && apt-get install -y tor iproute2 dnsutils
+
+RUN mkdir -p /home/debian-tor/.tor
+RUN chown -R debian-tor:debian-tor /home/debian-tor
+RUN mkdir -p /var/log/tor
+RUN chown -R debian-tor:debian-tor /var/log/tor
+
+
+COPY ./torrc.relay /etc/tor/torrc
+
+COPY ./tor-entrypoint.sh /entrypoint.sh
+
+ENTRYPOINT ["/entrypoint.sh"]

resources/images/tor/build-tor.sh

@@ -0,0 +1,15 @@
+SCRIPT_PATH="$(realpath "${BASH_SOURCE[0]}")"
+
+docker buildx build \
+    --platform linux/amd64,linux/arm64,linux/armhf \
+    --push \
+    -t bitcoindevproject/tor-da:latest \
+    -f ./resources/images/tor/Dockerfile_tor_da \
+    ./resources/images/tor/
+
+docker buildx build \
+    --platform linux/amd64,linux/arm64,linux/armhf \
+    --push \
+    -t bitcoindevproject/tor-relay:latest \
+    -f ./resources/images/tor/Dockerfile_tor_relay \
+    ./resources/images/tor/    

resources/images/tor/tor-entrypoint.sh

@@ -0,0 +1,21 @@
+#!/bin/bash
+set -e
+
+echo "Starting tor-entrypoint.sh"
+
+IP_ADDR=$(ip addr show eth0 | grep "inet\b" | awk '{print $2}' | cut -d/ -f1)
+
+until TORDA_IP=$(dig +short torda.default.svc.cluster.local); do
+  echo "Waiting for DNS: torda"
+  sleep 2
+done
+
+echo "My IP address: $IP_ADDR"
+echo "Directory Authority IP address: $TORDA_IP"
+
+echo "Address $IP_ADDR" >> /etc/tor/torrc
+echo "DirAuthority orport=9001 no-v2 v3ident=15E09A6BE3619593076D8324A2E1DBEEAD4539CD $TORDA_IP:9030 03E942A4F12D85B2CF7CBA4E910F321AE98EC233" >> /etc/tor/torrc
+
+cat /etc/tor/torrc
+
+su -s /bin/sh debian-tor -c 'tor'

resources/images/tor/tor-keys/authority_certificate

@@ -0,0 +1,45 @@
+dir-key-certificate-version 3
+fingerprint 15E09A6BE3619593076D8324A2E1DBEEAD4539CD
+dir-key-published 2023-09-08 18:28:10
+dir-key-expires 2025-09-08 18:28:10
+dir-identity-key
+-----BEGIN RSA PUBLIC KEY-----
+MIIBigKCAYEAs1eKRRP+mWy2XpLbkY3dPkEfdKIfPMDDiG3o/Xu0c3fin1aJ32uG
+BY3PGtwS2KQZHEJETjSaACq+2x9+fb4RV5bWhaptbt6l7dvDn15NbEklnkV3sx86
+VxiKqybUp5IQ3cNkM0AxUmQ1M/N+zzIe95T1XplaHVBSQN4xhJgYlDkDkNexIHpP
+0uFxjO+2hro3cMRotjqR6xZw5OWKVJh5Is8jiSUs57xomeUy5HaUsADw46b88Ff9
+iVfTP975jzuFF7H0kKOxRpIZGRnfnuDdAtYXWHYXtIVwKBdSeHeK/N53++kxtGET
+AcyWoHqO2xlvhtPbiKLHkwq0nNFFfwnhgJJSWHqYs6YI300pEMRHJMFWNsZwgwVE
+dplmxnOLv9/TnJsD06d+kc05/JTfZXE/3JFs4rMci0jIhMlw+HtFfRwpDMjGI00u
+VyADI0DMYTFWr+wFWrhs5N17BdQVSZUZlfxL5trZFdQpUZhxuKJowNLV1EdWzHFJ
+srwV+C0LLWr/AgMBAAE=
+-----END RSA PUBLIC KEY-----
+dir-signing-key
+-----BEGIN RSA PUBLIC KEY-----
+MIIBCgKCAQEAyARJ1Nano6bZsTf3UplBhaP8BfrhvDLrJmmk8x4sAot0aHPG/eOH
+qGak3y3CM1I+uxozyE58w9mBOuueUIzZelUZVjgg91dsqT5/3lIYEhB4riV29Of0
+AJeh2uibEVrv1ecXo5HYFKEcCHMRTvZaWIWSKjV6TPqPbpXhDBwIcZ+/tHpAml8h
+CfGMFRYIEmisNL9xjoNU1R4Iyu07xQw85+xeMU/9UJgsXnvkqkAPbAhwxZq9/8yj
+/9V4jcE5NR0KdDuPblEcD5ZNjMckUeTzuVDLgdsazOROD05zaTx8kP1UixJdon8Z
+oJ/fsNWsgpzNv6ns8BIwwEAOnd7seXlmfQIDAQAB
+-----END RSA PUBLIC KEY-----
+dir-key-crosscert
+-----BEGIN ID SIGNATURE-----
+DJzp0QmipBz3IJ6zWziyBEkNBPA5J6QDhq2XDFNjdq2RYcOh1hZ1D089587wP3Xg
+FoQehBDQccZCrmerEegdZ89dk+QXeNWrGGVpRwp7v+ok7lRPooC1IV3BIHcLs0BQ
+fm7d3kYByVl1IaY7D9mpKG6COS/WOrKEnxp75YW18KEH7oIA60c395DfEkUZvDWt
+a2ba2eBizM76cFUknQNlExWkw32DNtj1Axz9QyS6IQmyGxvlA1kWL6hiIPAV16NS
+E5FcU/wQHL7a7tqAM3UkuLKT3nhcbdYGcaYpbzU/4jF61bzm7ETcqqL40EMQg5Hs
+y3kcXZ4ItPFBn/LISp/zCg==
+-----END ID SIGNATURE-----
+dir-key-certification
+-----BEGIN SIGNATURE-----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-----END SIGNATURE-----

resources/images/tor/tor-keys/authority_identity_key

@@ -0,0 +1,41 @@
+-----BEGIN ENCRYPTED PRIVATE KEY-----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+-----END ENCRYPTED PRIVATE KEY-----

resources/images/tor/tor-keys/authority_signing_key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

resources/images/tor/tor-keys/secret_id_key

@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

resources/images/tor/tor-keys/secret_onion_key

@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

resources/images/tor/torrc

@@ -0,0 +1,34 @@
+# Common
+Log err file /var/log/tor/debug.log
+DataDirectory /home/debian-tor/.tor/
+RunAsDaemon 1
+ControlPort 9051
+CookieAuthentication 1
+CookieAuthFileGroupReadable 1
+DataDirectoryGroupReadable 1
+TestingTorNetwork 1
+ClientUseIPv6 0
+ClientUseIPv4 1
+
+# Relay
+DirAuthority orport=9001 no-v2 v3ident=15E09A6BE3619593076D8324A2E1DBEEAD4539CD 100.20.15.18:9030 03E942A4F12D85B2CF7CBA4E910F321AE98EC233
+AssumeReachable 1
+ExitRelay 0
+
+# Reduce resource usage
+CircuitPadding 0
+MaxMemInQueues 10 Mbytes
+BridgeRecordUsageByCountry 0
+DirReqStatistics 0
+ExtraInfoStatistics 0
+HiddenServiceStatistics 0
+OverloadStatistics 0
+PaddingStatistics 0
+# BandwidthBurst 10 Mbytes
+# BandwidthRate 10 Mbytes
+ConstrainedSockets 1
+ConstrainedSockSize 8192 Bytes
+NumEntryGuards 1
+NumDirectoryGuards 1
+
+# `Address <w.x.y.z>` will be added by docker_entrypoint.sh

resources/images/tor/torrc.da

@@ -0,0 +1,40 @@
+# Common
+Log info stdout
+DataDirectory /home/debian-tor/.tor
+RunAsDaemon 0
+ControlPort 9051
+ORPort 9001 IPv4Only
+DataDirectoryGroupReadable 1
+
+ExitPolicy accept *:*
+TestingTorNetwork 1
+ClientUseIPv6 0
+ClientUseIPv4 1
+
+# Relay
+AssumeReachable 1
+
+# Directory Authority
+DirPort 9030 IPv4Only
+AuthoritativeDirectory 1
+V3AuthoritativeDirectory 1
+PathsNeededToBuildCircuits 0.25
+TestingDirAuthVoteExit *
+TestingDirAuthVoteHSDir *
+V3AuthNIntervalsValid 2
+ContactInfo [email protected]
+
+# Reduce resource usage
+MaxMemInQueues 200 Mbytes
+BridgeRecordUsageByCountry 0
+DirReqStatistics 0
+ExtraInfoStatistics 0
+HiddenServiceStatistics 0
+OverloadStatistics 0
+PaddingStatistics 0
+ConstrainedSockets 1
+ConstrainedSockSize 8192 Bytes
+
+# `Address <w.x.y.z>` will be added by tor-entrypoint.
+# `DirAuthority v3ident=... <a.b.c.d>` will be added by tor-entrypoint.
+

resources/images/tor/torrc.relay

@@ -0,0 +1,36 @@
+# Common
+Log info stdout
+DataDirectory /home/debian-tor/.tor
+RunAsDaemon 0
+DataDirectoryGroupReadable 1
+
+# Bitcoin
+SocksPort 9050
+ControlPort 9051
+
+# Relay
+ORPort 9001 IPv4Only
+ExitPolicy accept *:*
+TestingTorNetwork 1
+ClientUseIPv6 0
+ClientUseIPv4 1
+AssumeReachable 1
+PathsNeededToBuildCircuits 0.25
+TestingDirAuthVoteExit *
+TestingDirAuthVoteHSDir *
+V3AuthNIntervalsValid 2
+
+# Reduce resource usage
+MaxMemInQueues 64 Mbytes
+BridgeRecordUsageByCountry 0
+DirReqStatistics 0
+ExtraInfoStatistics 0
+HiddenServiceStatistics 0
+OverloadStatistics 0
+PaddingStatistics 0
+ConstrainedSockets 1
+ConstrainedSockSize 8192 Bytes
+
+# `Address <w.x.y.z>` will be added by tor-entrypoint.
+# `DirAuthority v3ident=... <a.b.c.d>` will be added by tor-entrypoint.
+

resources/plugins/tor/charts/torda/.helmignore

@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

resources/plugins/tor/charts/torda/Chart.yaml

@@ -0,0 +1,5 @@
+apiVersion: v2
+name: torda
+description: A Helm chart to deploy a Tor Directory Authority
+version: 0.1.0
+appVersion: "0.1.0"

resources/plugins/tor/charts/torda/templates/NOTES.txt

@@ -0,0 +1 @@
+Thank you for installing TorDA.