mirror of
https://github.com/jessfraz/dockerfiles.git
synced 2024-11-23 11:31:49 +01:00
59 lines
1.7 KiB
Docker
59 lines
1.7 KiB
Docker
# Run tor browser in a container
|
|
#
|
|
# docker run -v /tmp/.X11-unix:/tmp/.X11-unix \
|
|
# -v /dev/snd:/dev/snd \
|
|
# -v /dev/shm:/dev/shm \
|
|
# -v /etc/machine-id:/etc/machine-id:ro \
|
|
# -e DISPLAY=unix$DISPLAY \
|
|
# jess/tor-browser:alpha
|
|
#
|
|
FROM debian:buster
|
|
LABEL maintainer "Jessie Frazelle <jess@linux.com>"
|
|
|
|
RUN apt-get update && apt-get install -y \
|
|
ca-certificates \
|
|
curl \
|
|
dirmngr \
|
|
gnupg \
|
|
libasound2 \
|
|
libdbus-glib-1-2 \
|
|
libgtk2.0-0 \
|
|
libx11-xcb-dev \
|
|
libxrender1 \
|
|
libxt6 \
|
|
xz-utils \
|
|
--no-install-recommends \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
ENV HOME /home/user
|
|
RUN useradd --create-home --home-dir $HOME user \
|
|
&& chown -R user:user $HOME
|
|
|
|
ENV LANG C.UTF-8
|
|
|
|
# https://www.torproject.org/projects/torbrowser.html.en
|
|
ENV TOR_VERSION 7.5a9
|
|
ENV TOR_FINGERPRINT 0x4E2C6E8793298290
|
|
|
|
# download tor and check signature
|
|
RUN cd /tmp \
|
|
&& curl -sSOL "https://www.torproject.org/dist/torbrowser/${TOR_VERSION}/tor-browser-linux64-${TOR_VERSION}_en-US.tar.xz" \
|
|
&& curl -sSOL "https://www.torproject.org/dist/torbrowser/${TOR_VERSION}/tor-browser-linux64-${TOR_VERSION}_en-US.tar.xz.asc" \
|
|
&& mkdir ~/.gnupg \
|
|
&& gpg --no-tty --keyserver "pool.sks-keyservers.net" --recv-keys ${TOR_FINGERPRINT} \
|
|
&& gpg --fingerprint --keyid-format LONG ${TOR_FINGERPRINT} | grep "Key fingerprint = EF6E 286D DA85 EA2A 4BA7 DE68 4E2C 6E87 9329 8290" \
|
|
&& gpg --verify tor-browser-linux64-${TOR_VERSION}_en-US.tar.xz.asc \
|
|
&& tar -vxJ --strip-components 1 -C /usr/local/bin -f tor-browser-linux64-${TOR_VERSION}_en-US.tar.xz \
|
|
&& rm -rf tor-browser* \
|
|
&& rm -rf ~/.gnupg
|
|
|
|
|
|
# good fonts
|
|
COPY local.conf /etc/fonts/local.conf
|
|
|
|
WORKDIR $HOME
|
|
USER user
|
|
|
|
ENTRYPOINT ["/bin/bash"]
|
|
CMD [ "/usr/local/bin/Browser/start-tor-browser", "--log", "/dev/stdout" ]
|