March 2021 - tor-commits - lists.torproject.org

[community/staging] Add Fedora instructions to automatically update relay, link to post-install instructions
by hiro＠torproject.org 21 Mar '21

21 Mar '21

commit cb3d88120d5c520a07fb9d41ca94f4488fcd2fe8 Author: gus <gus(a)torproject.org> Date: Thu Aug 29 06:27:44 2019 -0400 Add Fedora instructions to automatically update relay, link to post-install instructions --- .../technical-setup/guard/fedora/contents.lr | 14 +++++++-- .../guard/fedora/updates/contents.lr | 33 ++++++++++++++++++++++ 2 files changed, 44 insertions(+), 3 deletions(-) diff --git a/content/relay-operations/technical-setup/guard/fedora/contents.lr b/content/relay-operations/technical-setup/guard/fedora/contents.lr index cc984cc..5cfcf23 100644 --- a/content/relay-operations/technical-setup/guard/fedora/contents.lr +++ b/content/relay-operations/technical-setup/guard/fedora/contents.lr @@ -4,11 +4,15 @@ title: Fedora --- body: -# 1. Install the tor package: +# 1. Enable Automatic Software Updates + +One of the most imported things to keeps your relay secure is to install security updates timely and ideally automatically so you can not forget about it. Follow the instructions to enable [automatic software updates](updates) for your operating system. + +# 2. Install the tor package `dnf install tor` -# 2. Put the tor configuration file `/etc/tor/torrc` in place: +# 3. Put the tor configuration file `/etc/tor/torrc` in place ``` #change the nickname "myNiceRelay" to a name that you like @@ -19,12 +23,16 @@ ExitRelay 0 ContactInfo tor-operator@your-emailaddress-domain ``` -# 3. Start the tor daemon and make sure it starts at boot: +# 4. Start the tor daemon and make sure it starts at boot ``` systemctl enable tor systemctl start tor ``` + +# 5. Final notes + +If you are having troubles setting up your relay, have a look at our [help section](FIXME). If your relay is now running, check out the [post-install](/relay/setup/post-install/) notes. --- html: two-columns-page.html --- diff --git a/content/relay-operations/technical-setup/guard/fedora/updates/contents.lr b/content/relay-operations/technical-setup/guard/fedora/updates/contents.lr new file mode 100644 index 0000000..03ad164 --- /dev/null +++ b/content/relay-operations/technical-setup/guard/fedora/updates/contents.lr @@ -0,0 +1,33 @@ +_model: page +--- +title: Automatic Updates on Fedora +--- +body: + +On Fedora you enable automatic updates via: + +``` +dnf install dnf-automatic +``` + +Now enable and start automatic updates via: + +``` +systemctl enable --now dnf-automatic-install.timer +``` +--- +html: two-columns-page.html +--- +key: 1 +--- +section: Relay operations +--- +section_id: relay-operations +--- +subtitle: +--- +_hidden: yes +--- +_slug: updates +--- +_discoverable: no

1 0

[community/staging] Add RPM based distros instructions to automatically update, link to post-install
by hiro＠torproject.org 21 Mar '21

21 Mar '21

commit aeb0731cc1b6d9e7c70724312c529646a020bc46 Author: gus <gus(a)torproject.org> Date: Thu Aug 29 06:53:32 2019 -0400 Add RPM based distros instructions to automatically update, link to post-install --- .../technical-setup/guard/centosrhel/contents.lr | 16 +++-- .../guard/centosrhel/updates/contents.lr | 68 ++++++++++++++++++++++ 2 files changed, 80 insertions(+), 4 deletions(-) diff --git a/content/relay-operations/technical-setup/guard/centosrhel/contents.lr b/content/relay-operations/technical-setup/guard/centosrhel/contents.lr index 27b6031..9ab6048 100644 --- a/content/relay-operations/technical-setup/guard/centosrhel/contents.lr +++ b/content/relay-operations/technical-setup/guard/centosrhel/contents.lr @@ -4,19 +4,23 @@ title: CentOS/RHEL --- body: -# 1. Enable the EPEL repository +# 1. Enable Automatic Software Updates + +One of the most imported things to keeps your relay secure is to install security updates timely and ideally automatically so you can not forget about it. Follow the instructions to enable [automatic software updates](updates) for your operating system. + +# 2. Enable the EPEL repository To install `tor` package on CentOS/RHEL, you need to install the [EPEL](https://fedoraproject.org/wiki/EPEL) repository first: `yum install epel-release` -# 2. Install the tor package and verify the EPEL signing key +# 3. Install the tor package and verify the EPEL signing key `yum install tor` When you install the first package from the EPEL repository you will be asked about verifying the EPEL GPG signing key. Please ensure the key matches with the one available on the [Fedora Project website](https://getfedora.org/keys/). -# 3. Put the tor configuration file `/etc/tor/torrc` in place +# 4. Put the tor configuration file `/etc/tor/torrc` in place ``` #change the nickname "myNiceRelay" to a name that you like @@ -28,7 +32,7 @@ ExitRelay 0 ContactInfo tor-operator@your-emailaddress-domain ``` -# 4. Enable and start your Tor relay +# 5. Enable and start your Tor relay CentOS 7 / RHEL 7: @@ -44,6 +48,10 @@ service tor enable service tor start ``` +# 6. Final notes + +If you are having troubles setting up your relay, have a look at our [help section](FIXME). If your relay is now running, check out the [post-install](/relay/setup/post-install/) notes. + --- html: two-columns-page.html --- diff --git a/content/relay-operations/technical-setup/guard/centosrhel/updates/contents.lr b/content/relay-operations/technical-setup/guard/centosrhel/updates/contents.lr new file mode 100644 index 0000000..c452749 --- /dev/null +++ b/content/relay-operations/technical-setup/guard/centosrhel/updates/contents.lr @@ -0,0 +1,68 @@ +_model: page +--- +title: Automatic Updates on RPM Distributions +--- +_hidden: yes +--- +body: + +# CentOS and RHEL + +For CentOS and RHEL the yum-cron package is the preferred approach: + +``` +yum install yum-cron +``` + +In /etc/yum/yum-cron.conf set: + +``` +download_updates = yes +apply_updates = yes +``` + +Enable and start automatic updates via: + +``` +systemctl start yum-cron.service +``` + +# openSUSE + +First, you need to install the automatic update package + +``` +zypper install yast2-online-update-configuration +``` + +Then start the configuration tool (ncurses based) with: + +``` +yast2 online_update_configuration +``` + +Enable the following settings: + +``` + Automatic Online Update + Interval: Daily + Skip Interactive Patches + Agree with Licenses + Use delta rpms +``` + +Confirm your configuration with OK. + +The official openSUSE documentation can be found [here](https://doc.opensuse.org/documentation/leap/startup/html/book.opensus…. +--- +html: two-columns-page.html +--- +key: 1 +--- +section: Relay Operations +--- +section_id: relay-operations +--- +_slug: updates +--- +_discoverable: yes

1 0

[community/staging] Make the updates page discoverable
by hiro＠torproject.org 21 Mar '21

21 Mar '21

commit e81de09e3e590cb0f35a7ae99fa586a9bbf11823 Author: gus <gus(a)torproject.org> Date: Thu Aug 29 06:59:29 2019 -0400 Make the updates page discoverable --- .../relay-operations/technical-setup/guard/fedora/updates/contents.lr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/relay-operations/technical-setup/guard/fedora/updates/contents.lr b/content/relay-operations/technical-setup/guard/fedora/updates/contents.lr index 03ad164..f8ee3f7 100644 --- a/content/relay-operations/technical-setup/guard/fedora/updates/contents.lr +++ b/content/relay-operations/technical-setup/guard/fedora/updates/contents.lr @@ -30,4 +30,4 @@ _hidden: yes --- _slug: updates --- -_discoverable: no +_discoverable: yes

1 0

[community/staging] Replace node to relay so our documentation stay more consistent
by hiro＠torproject.org 21 Mar '21

21 Mar '21

commit 3b9712ce9bcedef350c4c51581b37c3012a0e2ae Author: gus <gus(a)torproject.org> Date: Thu Aug 29 07:16:41 2019 -0400 Replace node to relay so our documentation stay more consistent --- content/relay-operations/technical-setup/guard/centosrhel/contents.lr | 2 +- content/relay-operations/technical-setup/guard/debianubuntu/contents.lr | 2 +- content/relay-operations/technical-setup/guard/fedora/contents.lr | 2 +- content/relay-operations/technical-setup/guard/freebsd/contents.lr | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/content/relay-operations/technical-setup/guard/centosrhel/contents.lr b/content/relay-operations/technical-setup/guard/centosrhel/contents.lr index 9ab6048..47ee38c 100644 --- a/content/relay-operations/technical-setup/guard/centosrhel/contents.lr +++ b/content/relay-operations/technical-setup/guard/centosrhel/contents.lr @@ -61,4 +61,4 @@ section: relay operations --- section_id: relay-operations --- -subtitle: How to deploy a middle/Guard node on CentOS/RHEL +subtitle: How to deploy a middle/Guard relay on CentOS/RHEL diff --git a/content/relay-operations/technical-setup/guard/debianubuntu/contents.lr b/content/relay-operations/technical-setup/guard/debianubuntu/contents.lr index 2a8bedb..c3e1f15 100644 --- a/content/relay-operations/technical-setup/guard/debianubuntu/contents.lr +++ b/content/relay-operations/technical-setup/guard/debianubuntu/contents.lr @@ -51,4 +51,4 @@ section: relay operations --- section_id: relay-operations --- -subtitle: How to deploy a middle/Guard node on Debian/Ubuntu +subtitle: How to deploy a middle/Guard relay on Debian/Ubuntu diff --git a/content/relay-operations/technical-setup/guard/fedora/contents.lr b/content/relay-operations/technical-setup/guard/fedora/contents.lr index 5cfcf23..b89a8ce 100644 --- a/content/relay-operations/technical-setup/guard/fedora/contents.lr +++ b/content/relay-operations/technical-setup/guard/fedora/contents.lr @@ -42,4 +42,4 @@ section: relay operations --- section_id: relay-operations --- -subtitle: How to deploy a middle/Guard node on Fedora +subtitle: How to deploy a middle/Guard relay on Fedora diff --git a/content/relay-operations/technical-setup/guard/freebsd/contents.lr b/content/relay-operations/technical-setup/guard/freebsd/contents.lr index 01504ac..c86be07 100644 --- a/content/relay-operations/technical-setup/guard/freebsd/contents.lr +++ b/content/relay-operations/technical-setup/guard/freebsd/contents.lr @@ -77,4 +77,4 @@ section: relay operations --- section_id: relay-operations --- -subtitle: How to deploy a middle/Guard node on FreeBSD +subtitle: How to deploy a middle/Guard relay on FreeBSD

1 0

[community/staging] Hiding Fedora updates page
by hiro＠torproject.org 21 Mar '21

21 Mar '21

commit cd56a88f1c9a122243888b53c15fcd8051fe27a7 Author: gus <gus(a)torproject.org> Date: Thu Aug 29 07:32:30 2019 -0400 Hiding Fedora updates page --- .../relay-operations/technical-setup/guard/fedora/updates/contents.lr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/relay-operations/technical-setup/guard/fedora/updates/contents.lr b/content/relay-operations/technical-setup/guard/fedora/updates/contents.lr index f8ee3f7..03ad164 100644 --- a/content/relay-operations/technical-setup/guard/fedora/updates/contents.lr +++ b/content/relay-operations/technical-setup/guard/fedora/updates/contents.lr @@ -30,4 +30,4 @@ _hidden: yes --- _slug: updates --- -_discoverable: yes +_discoverable: no

1 0

[community/staging] Include BSD auto update instructions, link to post-install
by hiro＠torproject.org 21 Mar '21

21 Mar '21

commit f5d506dcbb4451110225b8926255b3644cce4556 Author: gus <gus(a)torproject.org> Date: Thu Aug 29 07:05:06 2019 -0400 Include BSD auto update instructions, link to post-install --- .../technical-setup/guard/freebsd/contents.lr | 15 +++++++++++---- 1 file changed, 11 insertions(+), 4 deletions(-) diff --git a/content/relay-operations/technical-setup/guard/freebsd/contents.lr b/content/relay-operations/technical-setup/guard/freebsd/contents.lr index a47dfc8..01504ac 100644 --- a/content/relay-operations/technical-setup/guard/freebsd/contents.lr +++ b/content/relay-operations/technical-setup/guard/freebsd/contents.lr @@ -4,7 +4,11 @@ title: FreeBSD --- body: -## 1. Install the tor package +# 1. Enable Automatic Software Updates + +One of the most imported things to keeps your relay secure is to install security updates timely and ideally automatically so you can not forget about it. Follow the instructions to enable [automatic software updates](updates) for your operating system. + +# 2. Install the tor package `pkg install tor ca_root_nss` @@ -12,7 +16,7 @@ or for alpha releases: `pkg install tor-devel ca_root_nss` -## 2. Put the configuration file `/usr/local/etc/tor/torrc` in place +# 3. Put the configuration file `/usr/local/etc/tor/torrc` in place ``` #change the nickname "myNiceRelay" to a name that you like @@ -25,14 +29,14 @@ ContactInfo tor-operator@your-emailaddress-domain Log notice syslog ``` -## 3. Ensure that the `random_id` sysctl setting is enabled: +# 4. Ensure that the `random_id` sysctl setting is enabled: ``` echo "net.inet.ip.random_id=1" >> /etc/sysctl.conf sysctl net.inet.ip.random_id=1 ``` -## 4. Start the tor daemon and make sure it starts at boot: +# 5. Start the tor daemon and make sure it starts at boot: ``` sysrc tor_enable=YES @@ -61,6 +65,9 @@ FreeBSDlatest: { } ``` +# 6. Final notes + +If you are having troubles setting up your relay, have a look at our [help section](FIXME). If your relay is now running, check out the [post-install](/relay/setup/post-install/) notes. --- html: two-columns-page.html ---

1 0

[community/staging] Hiding Debian updates page
by hiro＠torproject.org 21 Mar '21

21 Mar '21

commit c9e99c114feceefe29a15567a9f5397aa2cb8858 Author: gus <gus(a)torproject.org> Date: Thu Aug 29 07:32:00 2019 -0400 Hiding Debian updates page --- .../technical-setup/guard/debianubuntu/updates/contents.lr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/relay-operations/technical-setup/guard/debianubuntu/updates/contents.lr b/content/relay-operations/technical-setup/guard/debianubuntu/updates/contents.lr index 39c6547..7d9645f 100644 --- a/content/relay-operations/technical-setup/guard/debianubuntu/updates/contents.lr +++ b/content/relay-operations/technical-setup/guard/debianubuntu/updates/contents.lr @@ -2,7 +2,7 @@ _model: page --- title: Automatic updates on Debian and Ubuntu --- -_discoverable: yes +_discoverable: no --- _hidden: yes ---

1 0

[community/staging] Create child page with BSD auto update instructions
by hiro＠torproject.org 21 Mar '21

21 Mar '21

commit 3fc8f0efe60b71920863fe9d6ced516c2940110b Author: gus <gus(a)torproject.org> Date: Thu Aug 29 07:12:44 2019 -0400 Create child page with BSD auto update instructions --- .../guard/freebsd/updates/contents.lr | 45 ++++++++++++++++++++++ 1 file changed, 45 insertions(+) diff --git a/content/relay-operations/technical-setup/guard/freebsd/updates/contents.lr b/content/relay-operations/technical-setup/guard/freebsd/updates/contents.lr new file mode 100644 index 0000000..bc1dd05 --- /dev/null +++ b/content/relay-operations/technical-setup/guard/freebsd/updates/contents.lr @@ -0,0 +1,45 @@ +_model: page +--- +title: Automatic Updates on BSD* +--- +_hidden: no +--- +_slug: updates +--- +body: + +# DragonFlyBSD / FreeBSD / HardenedBSD + +**NOTE:** _all steps documented on this page are considering that your machine/server/system only provides Tor relay services. please be aware that other services running might stop/restart during the upgrade._ + +#1. Create the script to perform the updates. + +Let's use `/root/pkg_upgrade.sh` + +``` +#!/usr/bin/env sh +PATH="/bin:/usr/bin:/sbin:/usr/sbin" +RAND=$(jot -r 1 300) +sleep ${RAND} +env AUTOCLEAN=YES ASSUME_ALWAYS_YES=YES HANDLE_RC_SCRIPTS=YES pkg upgrade +``` + +#2. Schedule the job to run. + +``` +# echo "0 0 * * * root /bin/sh /root/pkg_upgrade.sh >/dev/null" >> /etc/crontab +``` + +#3. Restart cron's service. + +``` +# service cron restart +``` +--- +html: two-columns-page.html +--- +section: relay operations +--- +section_id: relay-operations +--- +key: 1

1 0

[community/staging] Hiding updates page
by hiro＠torproject.org 21 Mar '21

21 Mar '21

commit 944ce86f1b4b5f2ec42cdc10021fa7314f04ba27 Author: gus <gus(a)torproject.org> Date: Thu Aug 29 07:31:24 2019 -0400 Hiding updates page --- .../technical-setup/guard/centosrhel/updates/contents.lr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/relay-operations/technical-setup/guard/centosrhel/updates/contents.lr b/content/relay-operations/technical-setup/guard/centosrhel/updates/contents.lr index c452749..fb1db91 100644 --- a/content/relay-operations/technical-setup/guard/centosrhel/updates/contents.lr +++ b/content/relay-operations/technical-setup/guard/centosrhel/updates/contents.lr @@ -65,4 +65,4 @@ section_id: relay-operations --- _slug: updates --- -_discoverable: yes +_discoverable: no

1 0

[community/staging] Hiding BSD updates page
by hiro＠torproject.org 21 Mar '21

21 Mar '21

commit 0e97a83b480666f2679cc4225a02b841c5943ce4 Author: gus <gus(a)torproject.org> Date: Thu Aug 29 07:33:28 2019 -0400 Hiding BSD updates page --- .../relay-operations/technical-setup/guard/freebsd/updates/contents.lr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/relay-operations/technical-setup/guard/freebsd/updates/contents.lr b/content/relay-operations/technical-setup/guard/freebsd/updates/contents.lr index bc1dd05..6746558 100644 --- a/content/relay-operations/technical-setup/guard/freebsd/updates/contents.lr +++ b/content/relay-operations/technical-setup/guard/freebsd/updates/contents.lr @@ -2,7 +2,7 @@ _model: page --- title: Automatic Updates on BSD* --- -_hidden: no +_hidden: yes --- _slug: updates ---

1 0