Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Testing privilege separation settings #113

Draft
wants to merge 11 commits into
base: master
Choose a base branch
from

Conversation

gStart9
Copy link

@gStart9 gStart9 commented Sep 20, 2023

No description provided.

@gStart9
Copy link
Author

gStart9 commented Sep 20, 2023

This will probably get a lot more changes, just playing and making sure things will work at this point

@theborakompanioni
Copy link
Collaborator

Nice! Cannot wait to test this 🧡
I concerted it to draft so you can signal once others can provide feedback!
Thanks @gStart9 🙏

@theborakompanioni theborakompanioni marked this pull request as draft September 21, 2023 10:15
@@ -78,7 +78,7 @@ RUN adduser --uid 704704 --system --group --gecos 'tor user' tor \
&& useradd --uid 7012348 --system -g joinmarket --comment 'ob-watcher user' jm-ob \
&& sed "s|http://|https://|" /etc/apt/sources.list \
&& apt-get update \
&& apt-get install -qq --no-install-recommends --no-install-suggests -y gnupg curl apt-transport-https ca-certificates \
Copy link
Author

@gStart9 gStart9 Nov 8, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As of apt 1.5, the package apt-transport-https is no longer required because https:// is supported out of the box.
Reference: https://packages.debian.org/bullseye/apt-transport-https

This is a dummy transitional package - https support has been moved into the apt package in 1.5. It can be safely removed."

Apt is currently at 2.6.

gStart9 and others added 4 commits November 9, 2023 22:41
* Testing privilege separation settings

* chore(config): regenerate default config

* chore(config): add additional directory nodes

* Update jam to v0.1.6 (automated change)

* build(deps): update bullseye from 20221004 to 20230919

* build(deps): update alpine from v3.16.2 to v3.18.3

* build(deps): update nginx from v1.23.1 to v1.25.2

* docs(readme): add run example using the host network

* Reorganize and adduser create home

* Rearrange adduser switch for suppolemental groups

* Switch to useradd for better supplemental group support

* More touchups

* yank apt-transport-https

---------

Co-authored-by: theborakompanioni <[email protected]>
Co-authored-by: theborakompanioni <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants