Skip to content

Instantly share code, notes, and snippets.

@vanillaSprinkles
Last active December 20, 2015 17:48
Show Gist options
  • Save vanillaSprinkles/6171065 to your computer and use it in GitHub Desktop.
Save vanillaSprinkles/6171065 to your computer and use it in GitHub Desktop.
Running Tor in a Chroot for CentOS 6.4 x86_64
# modified from: https://wiki.archlinux.org/index.php?title=Tor
#!/bin/bash
export TORCHROOT=/opt/torchroot
mkdir -p $TORCHROOT
mkdir -p $TORCHROOT/etc/tor
mkdir -p $TORCHROOT/dev
mkdir -p $TORCHROOT/usr/bin
#mkdir -p $TORCHROOT/lib64
mkdir -p $TORCHROOT/usr/lib64
mkdir -p $TORCHROOT/var/lib
#ln -s /usr/lib $TORCHROOT/lib
cp /etc/hosts $TORCHROOT/etc/
cp /etc/host.conf $TORCHROOT/etc/
cp /etc/localtime $TORCHROOT/etc/
cp /etc/nsswitch.conf $TORCHROOT/etc/
cp /etc/resolv.conf $TORCHROOT/etc/
cp /etc/tor/torrc $TORCHROOT/etc/tor/
sed -i 's/^#*\(DataDirectory \/var\/lib\/tor\)/\1/g' $TORCHROOT/etc/tor/torrc
cp /usr/bin/tor $TORCHROOT/usr/bin/
ln -s /usr/lib64 $TORCHROOT/lib64
for F in $(ldd -r /usr/bin/tor | awk '{print $3}'|grep --color=never "^/" | sed 's/^.*\(\/lib[0-9]*\/[a-z]*\).*/\/usr\1*/g'); do /bin/cp -f ${F} $TORCHROOT/${F%/*}/. ; done
/bin/cp -f /lib64/libgcc_s.so* /lib64/ld-linux-x86-64.so* /lib64/libnss* /lib64/libnsl* /lib64/libresolv* $TORCHROOT/lib64/
/bin/cp -f /usr/lib64/libgcc_s.so* /usr/lib64/ld-linux-x86-64.so* /usr/lib64/libnss* /usr/lib64/libnsl* /usr/lib64/libresolv* $TORCHROOT/usr/lib64/
/bin/cp -f /usr/lib64/libssl* /usr/lib64/libcrypto* /usr/lib64/libevent* $TORCHROOT/usr/lib64/
cp -r /var/lib/tor $TORCHROOT/var/lib/
chown -R toranon:toranon $TORCHROOT/var/lib/tor
sh -c "grep --color=never ^tor /etc/passwd > $TORCHROOT/etc/passwd"
sh -c "grep --color=never ^tor /etc/group > $TORCHROOT/etc/group"
mknod -m 644 $TORCHROOT/dev/random c 1 8
mknod -m 644 $TORCHROOT/dev/urandom c 1 9
mknod -m 666 $TORCHROOT/dev/null c 1 3
chroot --userspec=toranon:toranon /opt/torchroot /usr/bin/tor
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment