[tor-talk] Tor browser for ARM architecture

[Mirimir]

On 07/13/2015 02:29 AM, Pickfire wrote:
> 
> On Mon, Jul 13, 2015 at 02:10:53AM -0600, Mirimir wrote:
>> On 07/13/2015 01:51 AM, Pickfire wrote:
>>> Hi, is there a tor browser for ARM architecture?
>> I've built it in Raspbian on Raspberry Pi2.
> 
> I hope you can show me the link. I am using Pi2 too.

Update the following for the latest Tor browser release.

See https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking
and
https://gitweb.torproject.org/builders/tor-browser-bundle.git/tree/gitian/descriptors/linux/gitian-firefox.yml#l8

$ sudo apt-get install --no-install-suggests --no-install-recommends
libasound2-dev libcurl4-openssl-dev libglib2.0-dev libgtk2.0-dev
libdbus-1-dev libdbus-glib-1-dev libgstreamer-plugins-base0.10-dev
libxt-dev libtool autoconf autoconf2.13 g++ libpulse-dev git yasm
zip unzip mesa-common-dev hardening-wrapper pkg-config
$ git clone https://git.torproject.org/tor-browser.git
$ cd tor-browser
$ git branch -a
$ git checkout remotes/origin/tor-browser-31.5.0esr-4.5-1
$ make $CONFIGURE_ARGS -f client.mk configure
CONFIGURE_ARGS="--with-tor-browser-version=4.5a4
--enable-update-channel=alpha"
$ nano /home/pi/tor-browser/.mozconfig
   ...
   #ac_add_options --enable-tor-browser-update
   ...
$ make $MAKEOPTS -f client.mk build        <= takes several hours
$ make -C obj-* package INNER_MAKE_PACKAGE=true

get tor-browser-linux32-4.5a4_en-US.tar.xz
move to ~/

$ tar -xvfJ tor-browser-linux32-4.5a4_en-US.tar.xz
$ nano
~/tor-browser_en-US/Browser/TorBrowser/Data/Browser/profile.default/prefs.js
   .............................................................
   ...
   user_pref("extensions.torlauncher.prompt_at_startup", false);
   user_pref("extensions.torlauncher.start_tor", false);
   ...
   .............................................................
$ cp -a ~/tor-browser/obj-armv7l-unknown-linux-gnueabihf/dist/firefox/*
~/tor-browser_en-US/Browser/

start browser and change SocksPort to 192.168.2.1:9150

>> But I was doing a Whonix-like setup, with a Tor-gateway Pi2 and a
>> workspace Pi2, so I only built the browser component.
> 
> What do you mean by that?

I used two Pi2. The gateway Pi2 runs only Tor, and had a second USB NIC.
The workspace Pi2 runs Tor browser etc. Both have iptables rules to
allow only necessary traffic, and to prevent leaks. Even if the
workspace Pi2 gets pwned, it can't reach the Internet except through the
Tor gateway Pi2.