mirror of
https://github.com/raspiblitz/raspiblitz.git
synced 2025-04-21 14:04:15 +02:00
add xxd and TOR script
This commit is contained in:
parent
5c5d9b5562
commit
33f8cb2cd0
219
DietPi/Tor/96addTorService_from_RaspiBlitz_v0.92.sh
Executable file
219
DietPi/Tor/96addTorService_from_RaspiBlitz_v0.92.sh
Executable file
@ -0,0 +1,219 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Background:
|
||||
# https://medium.com/@lopp/how-to-run-bitcoin-as-a-tor-hidden-service-on-ubuntu-cff52d543756
|
||||
# https://bitcoin.stackexchange.com/questions/70069/how-can-i-setup-bitcoin-to-be-anonymous-with-tor
|
||||
# https://github.com/lightningnetwork/lnd/blob/master/docs/configuring_tor.md
|
||||
|
||||
# load network
|
||||
network=`cat .network`
|
||||
chain="$(${network}-cli getblockchaininfo | jq -r '.chain')"
|
||||
|
||||
# location of TOR config
|
||||
torrc="/etc/tor/torrc"
|
||||
|
||||
# check if TOR was already installed and is funtional
|
||||
clear
|
||||
echo ""
|
||||
echo "*** Check if TOR service is functional ***"
|
||||
torRunning=$(curl --connect-timeout 10 --socks5-hostname 127.0.0.1:9050 https://check.torproject.org | grep "Congratulations. This browser is configured to use Tor." -c)
|
||||
if [ ${torRunning} -gt 0 ]; then
|
||||
clear
|
||||
echo "You are all good - TOR is already running."
|
||||
echo ""
|
||||
exit 0
|
||||
else
|
||||
echo "TOR not running ... proceed with switching to TOR."
|
||||
echo ""
|
||||
fi
|
||||
|
||||
# ask user if to proceed
|
||||
dialog --title " WARNING " --yesno "At the moment you just can switch TOR on - YOU CANNOT SWITCH BACK. Do you want to proceed?" 8 57
|
||||
response=$?
|
||||
case $response in
|
||||
1) exit 1;
|
||||
esac
|
||||
|
||||
echo "*** Adding Tor Sources to sources.list ***"
|
||||
echo "deb http://deb.torproject.org/torproject.org stretch main" | sudo tee -a /etc/apt/sources.list
|
||||
echo "deb-src http://deb.torproject.org/torproject.org stretch main" | sudo tee -a /etc/apt/sources.list
|
||||
echo "OK"
|
||||
echo ""
|
||||
|
||||
echo "*** Installing dirmngr ***"
|
||||
sudo apt install dirmngr
|
||||
echo ""
|
||||
|
||||
## lopp: gpg --keyserver keys.gnupg.net --recv 886DDD89
|
||||
echo "*** Fetching GPG key ***"
|
||||
gpg --keyserver keys.gnupg.net --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89
|
||||
gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -
|
||||
echo ""
|
||||
|
||||
echo "*** Updating System ***"
|
||||
sudo apt-get update
|
||||
echo ""
|
||||
|
||||
echo "*** Install Tor ***"
|
||||
sudo apt install tor tor-arm -y
|
||||
|
||||
echo ""
|
||||
echo "*** Tor Config ***"
|
||||
sudo rm -r -f /mnt/hdd/tor 2>/dev/null
|
||||
sudo mkdir /mnt/hdd/tor
|
||||
sudo mkdir /mnt/hdd/tor/sys
|
||||
sudo mkdir /mnt/hdd/tor/web80
|
||||
sudo mkdir /mnt/hdd/tor/lnd9735
|
||||
sudo mkdir /mnt/hdd/tor/lndrpc9735
|
||||
sudo chmod -R 700 /mnt/hdd/tor
|
||||
sudo chown -R bitcoin:bitcoin /mnt/hdd/tor
|
||||
cat > ./torrc <<EOF
|
||||
### See 'man tor', or https://www.torproject.org/docs/tor-manual.html
|
||||
|
||||
DataDirectory /mnt/hdd/tor/sys
|
||||
PidFile /mnt/hdd/tor/sys/tor.pid
|
||||
|
||||
SafeLogging 0
|
||||
Log notice stdout
|
||||
Log notice file /mnt/hdd/tor/notice.log
|
||||
Log info file /mnt/hdd/tor/info.log
|
||||
|
||||
RunAsDaemon 1
|
||||
User bitcoin
|
||||
PortForwarding 1
|
||||
ControlPort 9051
|
||||
SocksPort 9050
|
||||
|
||||
CookieAuthFile /mnt/hdd/tor/sys/control_auth_cookie
|
||||
CookieAuthentication 1
|
||||
CookieAuthFileGroupReadable 1
|
||||
|
||||
# Hidden Service v2 for WEB ADMIN INTERFACE
|
||||
HiddenServiceDir /mnt/hdd/tor/web80/
|
||||
HiddenServicePort 80 127.0.0.1:80
|
||||
|
||||
# Hidden Service v2 for LND RPC
|
||||
HiddenServiceDir /mnt/hdd/tor/lndrpc10009/
|
||||
HiddenServicePort 80 127.0.0.1:10009
|
||||
|
||||
# Hidden Service v3 for LND incomming connections (just in case)
|
||||
# https://trac.torproject.org/projects/tor/wiki/doc/NextGenOnions#Howtosetupyourownprop224service
|
||||
HiddenServiceDir /mnt/hdd/tor/lnd9735
|
||||
HiddenServiceVersion 3
|
||||
HiddenServicePort 9735 127.0.0.1:9735
|
||||
|
||||
# NOTE: bitcoind get tor service automatically - see /mnt/hdd/bitcoin for onion key
|
||||
EOF
|
||||
sudo rm $torrc
|
||||
sudo mv ./torrc $torrc
|
||||
sudo chmod 644 $torrc
|
||||
sudo chown -R bitcoin:bitcoin /var/run/tor/
|
||||
echo ""
|
||||
|
||||
# NYX - Tor monitor tool
|
||||
# https://nyx.torproject.org/#home
|
||||
echo "*** Installing NYX - TOR monitoring Tool ***"
|
||||
nyxInstalled=$(sudo pip list 2>/dev/null | grep 'nyx' -c)
|
||||
if [ ${nyxInstalled} -eq 0 ]; then
|
||||
sudo pip install nyx
|
||||
else
|
||||
echo "NYX already installed"
|
||||
fi
|
||||
echo ""
|
||||
|
||||
echo "*** Activating TOR system service ***"
|
||||
echo "ReadWriteDirectories=-/mnt/hdd/tor" | sudo tee -a /lib/systemd/system/tor@default.service
|
||||
sudo systemctl daemon-reload
|
||||
sudo systemctl restart tor@default
|
||||
echo ""
|
||||
|
||||
echo "*** Waiting for TOR to boostrap ***"
|
||||
torIsBootstrapped=0
|
||||
while [ ${torIsBootstrapped} -eq 0 ]
|
||||
do
|
||||
echo "--- Checking 1 ---"
|
||||
date +%s
|
||||
sudo cat /mnt/hdd/tor/notice.log 2>/dev/null | grep "Bootstrapped" | tail -n 10
|
||||
torIsBootstrapped=$(sudo cat /mnt/hdd/tor/notice.log 2>/dev/null | grep "Bootstrapped 100" -c)
|
||||
echo "torIsBootstrapped(${torIsBootstrapped})"
|
||||
echo "If this takes too long --> CTRL+c, reboot and check manually"
|
||||
sleep 5
|
||||
done
|
||||
echo "OK - Tor Bootstrap is ready"
|
||||
echo ""
|
||||
|
||||
echo "*** Changing ${network} Config ***"
|
||||
networkIsTor=$(sudo cat /home/bitcoin/.${network}/${network}.conf | grep 'onlynet=onion' -c)
|
||||
if [ ${networkIsTor} -eq 0 ]; then
|
||||
|
||||
echo "Only Connect thru TOR"
|
||||
echo "onlynet=onion" | sudo tee --append /home/bitcoin/.${network}/${network}.conf
|
||||
|
||||
if [ "${network}" = "bitcoin" ]; then
|
||||
echo "Adding some bitcoin onion nodes to connect to"
|
||||
echo "addnode=fno4aakpl6sg6y47.onion" | sudo tee --append /home/bitcoin/.${network}/${network}.conf
|
||||
echo "addnode=toguvy5upyuctudx.onion" | sudo tee --append /home/bitcoin/.${network}/${network}.conf
|
||||
echo "addnode=ndndword5lpb7eex.onion" | sudo tee --append /home/bitcoin/.${network}/${network}.conf
|
||||
echo "addnode=6m2iqgnqjxh7ulyk.onion" | sudo tee --append /home/bitcoin/.${network}/${network}.conf
|
||||
echo "addnode=5tuxetn7tar3q5kp.onion" | sudo tee --append /home/bitcoin/.${network}/${network}.conf
|
||||
fi
|
||||
|
||||
sudo cp /home/bitcoin/.${network}/${network}.conf /home/admin/.${network}/${network}.conf
|
||||
sudo chown admin:admin /home/admin/.${network}/${network}.conf
|
||||
|
||||
else
|
||||
echo "Chain network already configured for TOR"
|
||||
fi
|
||||
|
||||
echo "*** ${network} re-init - Waiting for Onion Address ***"
|
||||
# restarting bitcoind to start with tor and generare onion.address
|
||||
echo "restarting ${network}d ..."
|
||||
sudo systemctl restart ${network}d
|
||||
sleep 8
|
||||
onionAddress=""
|
||||
while [ ${#onionAddress} -eq 0 ]
|
||||
do
|
||||
echo "--- Checking 2 ---"
|
||||
date +%s
|
||||
testNetAdd=""
|
||||
if [ "${chain}" = "test" ];then
|
||||
testNetAdd="/testnet3"
|
||||
fi
|
||||
sudo cat /mnt/hdd/${network}${testNetAdd}/debug.log 2>/dev/null | grep "tor" | tail -n 10
|
||||
onionAddress=$(sudo -u bitcoin ${network}-cli getnetworkinfo | grep '"address"' | cut -d '"' -f4)
|
||||
echo "Can take up to 20min - if this takes longer --> CTRL+c, reboot and check manually"
|
||||
sleep 5
|
||||
done
|
||||
onionPort=$(sudo -u bitcoin ${network}-cli getnetworkinfo | grep '"port"' | tr -dc '0-9')
|
||||
echo "Your Chain Network Onion Address is: ${onionAddress}:${onionPort}"
|
||||
echo ""
|
||||
|
||||
echo "*** Setting your Onion Address ***"
|
||||
onionLND=$(sudo cat /mnt/hdd/tor/lnd9735/hostname)
|
||||
echo "Your Lightning Tor Onion Address is: ${onionLND}:9735"
|
||||
echo ""
|
||||
|
||||
# ACTIVATE LND OVER TOR
|
||||
echo "*** Putting LND behind TOR ***"
|
||||
echo "Disable LND again"
|
||||
sudo systemctl disable lnd
|
||||
echo "Writing Public Onion Address to /run/publicip (just in case for TotHiddenServiceV3)"
|
||||
echo "PUBLICIP=${onionLND}" | sudo tee /run/publicip
|
||||
echo "Configure and Changing to lnd.tor.service"
|
||||
sed -i "5s/.*/Wants=${network}d.service/" ./assets/lnd.tor.service
|
||||
sed -i "6s/.*/After=${network}d.service/" ./assets/lnd.tor.service
|
||||
sudo cp /home/admin/assets/lnd.tor.service /etc/systemd/system/lnd.service
|
||||
sudo chmod +x /etc/systemd/system/lnd.service
|
||||
echo "Enable LND again"
|
||||
sudo systemctl enable lnd
|
||||
echo "OK"
|
||||
echo ""
|
||||
|
||||
echo "*** Finshing Setup / REBOOT ***"
|
||||
echo "OK - all should be set"
|
||||
echo ""
|
||||
echo "PRESS ENTER ... to REBOOT"
|
||||
read key
|
||||
|
||||
sudo shutdown -r now
|
||||
exit 0
|
412
DietPi/Tor/Tor_install_output
Normal file
412
DietPi/Tor/Tor_install_output
Normal file
@ -0,0 +1,412 @@
|
||||
admin@DietPi:~$ sudo nano 96addTorService.sh
|
||||
admin@DietPi:~$ ./96addTorService.sh
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
*** Check if TOR service is functional ***
|
||||
./96addTorService.sh: line 20: [: -gt: unary operator expected
|
||||
TOR not running ... proceed with switching to TOR.
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
┌────────────────────── WARNING ────────────────────────┐
|
||||
│ At the moment you just can switch TOR on - YOU CANNOT │
|
||||
│ SWITCH BACK. Do you want to proceed? │
|
||||
│ │
|
||||
│ │
|
||||
├───────────────────────────────────────────────────────┤
|
||||
│ < Yes > < No > │
|
||||
└───────────────────────────────────────────────────────┘
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
*** Adding Tor Sources to sources.list ***
|
||||
deb http://deb.torproject.org/torproject.org stretch main
|
||||
deb-src http://deb.torproject.org/torproject.org stretch main
|
||||
OK
|
||||
|
||||
*** Installing dirmngr ***
|
||||
Reading package lists... Done
|
||||
Building dependency tree
|
||||
Reading state information... Done
|
||||
dirmngr is already the newest version (2.1.18-8~deb9u3).
|
||||
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
|
||||
W: Target Sources (main/source/Sources) is configured multiple times in /etc/apt/sources.list:6 and /etc/apt/sources.list:8
|
||||
W: Target Sources (main/source/Sources) is configured multiple times in /etc/apt/sources.list:6 and /etc/apt/sources.list:10
|
||||
W: Target Packages (main/binary-armhf/Packages) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:7
|
||||
W: Target Packages (main/binary-all/Packages) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:7
|
||||
W: Target Translations (main/i18n/Translation-en_GB) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:7
|
||||
W: Target Translations (main/i18n/Translation-en) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:7
|
||||
W: Target Packages (main/binary-armhf/Packages) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:9
|
||||
W: Target Packages (main/binary-all/Packages) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:9
|
||||
W: Target Translations (main/i18n/Translation-en_GB) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:9
|
||||
W: Target Translations (main/i18n/Translation-en) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:9
|
||||
|
||||
*** Fetching GPG key ***
|
||||
uid deb.torproject.org archive signing key
|
||||
sig!3 EE8CBC9E886DDD89 2009-09-04 [self-signature]
|
||||
sig!3 EE8CBC9E886DDD89 2012-08-29 [self-signature]
|
||||
sig!3 EE8CBC9E886DDD89 2014-08-31 [self-signature]
|
||||
sig!3 EE8CBC9E886DDD89 2018-08-06 [self-signature]
|
||||
sub 74A941BA219EC810
|
||||
sig! EE8CBC9E886DDD89 2009-09-04 [self-signature]
|
||||
sig! EE8CBC9E886DDD89 2012-08-29 [self-signature]
|
||||
sig! EE8CBC9E886DDD89 2014-08-31 [self-signature]
|
||||
sig! EE8CBC9E886DDD89 2018-08-06 [self-signature]
|
||||
key EE8CBC9E886DDD89:
|
||||
2 duplicate signatures removed
|
||||
82 signatures not checked due to missing keys
|
||||
gpg: key EE8CBC9E886DDD89: "deb.torproject.org archive signing key" not changed
|
||||
gpg: Total number processed: 1
|
||||
gpg: unchanged: 1
|
||||
key EE8CBC9E886DDD89:
|
||||
82 signatures not checked due to missing keys
|
||||
OK
|
||||
|
||||
*** Updating System ***
|
||||
Hit:1 http://fuzon.co.uk/meveric all InRelease
|
||||
Hit:2 http://deb.torproject.org/torproject.org stretch InRelease
|
||||
Hit:3 http://fuzon.co.uk/meveric stretch InRelease
|
||||
Ign:4 https://cdn-aws.deb.debian.org/debian stretch InRelease
|
||||
Hit:5 https://cdn-aws.deb.debian.org/debian stretch-updates InRelease
|
||||
Hit:6 https://cdn-aws.deb.debian.org/debian-security stretch/updates InRelease
|
||||
Hit:7 https://cdn-aws.deb.debian.org/debian stretch-backports InRelease
|
||||
Hit:8 https://cdn-aws.deb.debian.org/debian stretch Release
|
||||
Hit:10 https://oph.mdrjr.net/meveric all InRelease
|
||||
Reading package lists... Done
|
||||
W: Target Sources (main/source/Sources) is configured multiple times in /etc/apt/sources.list:6 and /etc/apt/sources.list:8
|
||||
W: Target Sources (main/source/Sources) is configured multiple times in /etc/apt/sources.list:6 and /etc/apt/sources.list:10
|
||||
W: Target Packages (main/binary-armhf/Packages) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:7
|
||||
W: Target Packages (main/binary-all/Packages) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:7
|
||||
W: Target Translations (main/i18n/Translation-en_GB) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:7
|
||||
W: Target Translations (main/i18n/Translation-en) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:7
|
||||
W: Target Packages (main/binary-armhf/Packages) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:9
|
||||
W: Target Packages (main/binary-all/Packages) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:9
|
||||
W: Target Translations (main/i18n/Translation-en_GB) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:9
|
||||
W: Target Translations (main/i18n/Translation-en) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:9
|
||||
W: Target Sources (main/source/Sources) is configured multiple times in /etc/apt/sources.list:6 and /etc/apt/sources.list:8
|
||||
W: Target Sources (main/source/Sources) is configured multiple times in /etc/apt/sources.list:6 and /etc/apt/sources.list:10
|
||||
W: Target Packages (main/binary-armhf/Packages) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:7
|
||||
W: Target Packages (main/binary-all/Packages) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:7
|
||||
W: Target Translations (main/i18n/Translation-en_GB) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:7
|
||||
W: Target Translations (main/i18n/Translation-en) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:7
|
||||
W: Target Packages (main/binary-armhf/Packages) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:9
|
||||
W: Target Packages (main/binary-all/Packages) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:9
|
||||
W: Target Translations (main/i18n/Translation-en_GB) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:9
|
||||
W: Target Translations (main/i18n/Translation-en) is configured multiple times in /etc/apt/sources.list:5 and /etc/apt/sources.list:9
|
||||
|
||||
*** Install Tor ***
|
||||
Reading package lists... Done
|
||||
Building dependency tree
|
||||
Reading state information... Done
|
||||
tor-arm is already the newest version (1.4.5.0-1.1).
|
||||
tor is already the newest version (0.3.5.7-1~d90.stretch+1).
|
||||
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
|
||||
|
||||
*** Tor Config ***
|
||||
|
||||
*** Installing NYX - TOR monitoring Tool ***
|
||||
Collecting nyx
|
||||
Using cached https://files.pythonhosted.org/packages/f4/da/68419425cb0f64f996e2150045c7043c2bb61f77b5928c2156c26a21db88/nyx-2.1.0.tar.gz
|
||||
Complete output from command python setup.py egg_info:
|
||||
Traceback (most recent call last):
|
||||
File "<string>", line 1, in <module>
|
||||
ImportError: No module named setuptools
|
||||
|
||||
----------------------------------------
|
||||
Command "python setup.py egg_info" failed with error code 1 in /tmp/pip-build-MEJi99/nyx/
|
||||
|
||||
*** Activating TOR system service ***
|
||||
ReadWriteDirectories=-/mnt/hdd/tor
|
||||
|
||||
*** Waiting for TOR to boostrap ***
|
||||
--- Checking 1 ---
|
||||
1548772231
|
||||
Jan 29 14:30:31.000 [notice] Bootstrapped 0%: Starting
|
||||
torIsBootstrapped(0)
|
||||
If this takes too long --> CTRL+c, reboot and check manually
|
||||
--- Checking 1 ---
|
||||
1548772236
|
||||
Jan 29 14:30:31.000 [notice] Bootstrapped 0%: Starting
|
||||
Jan 29 14:30:32.000 [notice] Bootstrapped 5%: Connecting to directory server
|
||||
Jan 29 14:30:32.000 [notice] Bootstrapped 10%: Finishing handshake with directory server
|
||||
Jan 29 14:30:32.000 [notice] Bootstrapped 15%: Establishing an encrypted directory connection
|
||||
Jan 29 14:30:32.000 [notice] Bootstrapped 20%: Asking for networkstatus consensus
|
||||
Jan 29 14:30:32.000 [notice] Bootstrapped 25%: Loading networkstatus consensus
|
||||
Jan 29 14:30:35.000 [notice] Bootstrapped 40%: Loading authority key certs
|
||||
torIsBootstrapped(0)
|
||||
If this takes too long --> CTRL+c, reboot and check manually
|
||||
--- Checking 1 ---
|
||||
1548772241
|
||||
Jan 29 14:30:31.000 [notice] Bootstrapped 0%: Starting
|
||||
Jan 29 14:30:32.000 [notice] Bootstrapped 5%: Connecting to directory server
|
||||
Jan 29 14:30:32.000 [notice] Bootstrapped 10%: Finishing handshake with directory server
|
||||
Jan 29 14:30:32.000 [notice] Bootstrapped 15%: Establishing an encrypted directory connection
|
||||
Jan 29 14:30:32.000 [notice] Bootstrapped 20%: Asking for networkstatus consensus
|
||||
Jan 29 14:30:32.000 [notice] Bootstrapped 25%: Loading networkstatus consensus
|
||||
Jan 29 14:30:35.000 [notice] Bootstrapped 40%: Loading authority key certs
|
||||
Jan 29 14:30:37.000 [notice] Bootstrapped 45%: Asking for relay descriptors for internal paths
|
||||
Jan 29 14:30:37.000 [notice] Bootstrapped 50%: Loading relay descriptors for internal paths
|
||||
torIsBootstrapped(0)
|
||||
If this takes too long --> CTRL+c, reboot and check manually
|
||||
--- Checking 1 ---
|
||||
1548772246
|
||||
Jan 29 14:30:35.000 [notice] Bootstrapped 40%: Loading authority key certs
|
||||
Jan 29 14:30:37.000 [notice] Bootstrapped 45%: Asking for relay descriptors for internal paths
|
||||
Jan 29 14:30:37.000 [notice] Bootstrapped 50%: Loading relay descriptors for internal paths
|
||||
Jan 29 14:30:42.000 [notice] Bootstrapped 57%: Loading relay descriptors
|
||||
Jan 29 14:30:42.000 [notice] Bootstrapped 65%: Loading relay descriptors
|
||||
Jan 29 14:30:42.000 [notice] Bootstrapped 72%: Loading relay descriptors
|
||||
Jan 29 14:30:42.000 [notice] Bootstrapped 80%: Connecting to the Tor network
|
||||
Jan 29 14:30:42.000 [notice] Bootstrapped 85%: Finishing handshake with first hop
|
||||
Jan 29 14:30:43.000 [notice] Bootstrapped 90%: Establishing a Tor circuit
|
||||
Jan 29 14:30:43.000 [notice] Bootstrapped 100%: Done
|
||||
torIsBootstrapped(1)
|
||||
If this takes too long --> CTRL+c, reboot and check manually
|
||||
OK - Tor Bootstrap is ready
|
||||
|
||||
*** Changing bitcoin Config ***
|
||||
Only Connect thru TOR
|
||||
onlynet=onion
|
||||
Adding some bitcoin onion nodes to connect to
|
||||
addnode=fno4aakpl6sg6y47.onion
|
||||
addnode=toguvy5upyuctudx.onion
|
||||
addnode=ndndword5lpb7eex.onion
|
||||
addnode=6m2iqgnqjxh7ulyk.onion
|
||||
addnode=5tuxetn7tar3q5kp.onion
|
||||
*** bitcoin re-init - Waiting for Onion Address ***
|
||||
restarting bitcoind ...
|
||||
--- Checking 2 ---
|
||||
1548772262
|
||||
2019-01-29T13:57:22Z Using 16 MiB out of 32/2 requested for script execution cache, able to store 524288 elements
|
||||
2019-01-29T13:58:22Z torcontrol thread start
|
||||
2019-01-29T14:30:51Z tor: Thread interrupt
|
||||
2019-01-29T14:30:51Z torcontrol thread exit
|
||||
2019-01-29T14:30:54Z Assuming ancestors of block 0000000000000000002e63058c023a9a1de233554f28c7b21380b6c9003f36a8 have valid signatures.
|
||||
2019-01-29T14:30:54Z Default data directory /home/bitcoin/.bitcoin
|
||||
2019-01-29T14:30:54Z Using data directory /mnt/hdd/bitcoin
|
||||
2019-01-29T14:30:54Z Using at most 40 automatic connections (1024 file descriptors available)
|
||||
2019-01-29T14:30:54Z Using 16 MiB out of 32/2 requested for signature cache, able to store 524288 elements
|
||||
2019-01-29T14:30:54Z Using 16 MiB out of 32/2 requested for script execution cache, able to store 524288 elements
|
||||
error code: -28
|
||||
error message:
|
||||
Loading block index...
|
||||
Can take up to 20min - if this takes longer --> CTRL+c, reboot and check manually
|
||||
--- Checking 2 ---
|
||||
1548772267
|
||||
2019-01-29T13:57:22Z Using 16 MiB out of 32/2 requested for script execution cache, able to store 524288 elements
|
||||
2019-01-29T13:58:22Z torcontrol thread start
|
||||
2019-01-29T14:30:51Z tor: Thread interrupt
|
||||
2019-01-29T14:30:51Z torcontrol thread exit
|
||||
2019-01-29T14:30:54Z Assuming ancestors of block 0000000000000000002e63058c023a9a1de233554f28c7b21380b6c9003f36a8 have valid signatures.
|
||||
2019-01-29T14:30:54Z Default data directory /home/bitcoin/.bitcoin
|
||||
2019-01-29T14:30:54Z Using data directory /mnt/hdd/bitcoin
|
||||
2019-01-29T14:30:54Z Using at most 40 automatic connections (1024 file descriptors available)
|
||||
2019-01-29T14:30:54Z Using 16 MiB out of 32/2 requested for signature cache, able to store 524288 elements
|
||||
2019-01-29T14:30:54Z Using 16 MiB out of 32/2 requested for script execution cache, able to store 524288 elements
|
||||
error code: -28
|
||||
error message:
|
||||
Loading block index...
|
||||
Can take up to 20min - if this takes longer --> CTRL+c, reboot and check manually
|
||||
--- Checking 2 ---
|
||||
1548772272
|
||||
2019-01-29T13:57:22Z Using 16 MiB out of 32/2 requested for script execution cache, able to store 524288 elements
|
||||
2019-01-29T13:58:22Z torcontrol thread start
|
||||
2019-01-29T14:30:51Z tor: Thread interrupt
|
||||
2019-01-29T14:30:51Z torcontrol thread exit
|
||||
2019-01-29T14:30:54Z Assuming ancestors of block 0000000000000000002e63058c023a9a1de233554f28c7b21380b6c9003f36a8 have valid signatures.
|
||||
2019-01-29T14:30:54Z Default data directory /home/bitcoin/.bitcoin
|
||||
2019-01-29T14:30:54Z Using data directory /mnt/hdd/bitcoin
|
||||
2019-01-29T14:30:54Z Using at most 40 automatic connections (1024 file descriptors available)
|
||||
2019-01-29T14:30:54Z Using 16 MiB out of 32/2 requested for signature cache, able to store 524288 elements
|
||||
2019-01-29T14:30:54Z Using 16 MiB out of 32/2 requested for script execution cache, able to store 524288 elements
|
||||
error code: -28
|
||||
error message:
|
||||
Rewinding blocks...
|
||||
Can take up to 20min - if this takes longer --> CTRL+c, reboot and check manually
|
||||
--- Checking 2 ---
|
||||
1548772277
|
||||
2019-01-29T13:57:22Z Using 16 MiB out of 32/2 requested for script execution cache, able to store 524288 elements
|
||||
2019-01-29T13:58:22Z torcontrol thread start
|
||||
2019-01-29T14:30:51Z tor: Thread interrupt
|
||||
2019-01-29T14:30:51Z torcontrol thread exit
|
||||
2019-01-29T14:30:54Z Assuming ancestors of block 0000000000000000002e63058c023a9a1de233554f28c7b21380b6c9003f36a8 have valid signatures.
|
||||
2019-01-29T14:30:54Z Default data directory /home/bitcoin/.bitcoin
|
||||
2019-01-29T14:30:54Z Using data directory /mnt/hdd/bitcoin
|
||||
2019-01-29T14:30:54Z Using at most 40 automatic connections (1024 file descriptors available)
|
||||
2019-01-29T14:30:54Z Using 16 MiB out of 32/2 requested for signature cache, able to store 524288 elements
|
||||
2019-01-29T14:30:54Z Using 16 MiB out of 32/2 requested for script execution cache, able to store 524288 elements
|
||||
error code: -28
|
||||
error message:
|
||||
Verifying blocks...
|
||||
Can take up to 20min - if this takes longer --> CTRL+c, reboot and check manually
|
||||
--- Checking 2 ---
|
||||
1548772282
|
||||
2019-01-29T14:30:51Z tor: Thread interrupt
|
||||
2019-01-29T14:30:51Z torcontrol thread exit
|
||||
2019-01-29T14:30:54Z Assuming ancestors of block 0000000000000000002e63058c023a9a1de233554f28c7b21380b6c9003f36a8 have valid signatures.
|
||||
2019-01-29T14:30:54Z Default data directory /home/bitcoin/.bitcoin
|
||||
2019-01-29T14:30:54Z Using data directory /mnt/hdd/bitcoin
|
||||
2019-01-29T14:30:54Z Using at most 40 automatic connections (1024 file descriptors available)
|
||||
2019-01-29T14:30:54Z Using 16 MiB out of 32/2 requested for signature cache, able to store 524288 elements
|
||||
2019-01-29T14:30:54Z Using 16 MiB out of 32/2 requested for script execution cache, able to store 524288 elements
|
||||
2019-01-29T14:31:20Z torcontrol thread start
|
||||
2019-01-29T14:31:20Z tor: Got service ID kxs4wmwoesb3z4e4, advertising service kxs4wmwoesb3z4e4.onion:8333
|
||||
Can take up to 20min - if this takes longer --> CTRL+c, reboot and check manually
|
||||
Your Chain Network Onion Address is: kxs4wmwoesb3z4e4.onion:8333
|
||||
|
||||
*** Setting your Onion Address ***
|
||||
Your Lightning Tor Onion Address is: mtgob7h2hupq7fqzp3egnayz2xvbam5d24ibm35dmr2jnsxwx7jfqcid.onion:9735
|
||||
|
||||
*** Putting LND behind TOR ***
|
||||
Disable LND again
|
||||
Removed /etc/systemd/system/multi-user.target.wants/lnd.service.
|
||||
Writing Public Onion Address to /run/publicip (just in case for TotHiddenServiceV3)
|
||||
PUBLICIP=mtgob7h2hupq7fqzp3egnayz2xvbam5d24ibm35dmr2jnsxwx7jfqcid.onion
|
||||
Configure and Changing to lnd.tor.service
|
||||
sed: can't read ./assets/lnd.tor.service: No such file or directory
|
||||
sed: can't read ./assets/lnd.tor.service: No such file or directory
|
||||
cp: cannot stat '/home/admin/assets/lnd.tor.service': No such file or directory
|
||||
Enable LND again
|
||||
Created symlink /etc/systemd/system/multi-user.target.wants/lnd.service → /etc/systemd/system/lnd.service.
|
||||
OK
|
||||
|
||||
*** Finshing Setup / REBOOT ***
|
||||
OK - all should be set
|
||||
|
||||
PRESS ENTER ... to REBOOT
|
||||
|
@ -103,6 +103,8 @@ if [ "${baseImage}" = "dietpi" ]; then
|
||||
sudo apt install -y rsync
|
||||
# install ifconfig
|
||||
sudo apt install -y net-tools
|
||||
#to display hex codes
|
||||
sudo apt install -y xxd
|
||||
fi
|
||||
|
||||
# special prepare when Raspbian
|
||||
|
222
home.admin/96addTorService.sh
Executable file
222
home.admin/96addTorService.sh
Executable file
@ -0,0 +1,222 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Background:
|
||||
# https://medium.com/@lopp/how-to-run-bitcoin-as-a-tor-hidden-service-on-ubuntu-cff52d543756
|
||||
# https://bitcoin.stackexchange.com/questions/70069/how-can-i-setup-bitcoin-to-be-anonymous-with-tor
|
||||
# https://github.com/lightningnetwork/lnd/blob/master/docs/configuring_tor.md
|
||||
|
||||
|
||||
# load network
|
||||
network=`cat .network`
|
||||
chain="$(${network}-cli getblockchaininfo | jq -r '.chain')"
|
||||
|
||||
# location of TOR config
|
||||
torrc="/etc/tor/torrc"
|
||||
|
||||
# check if TOR was already installed and is funtional
|
||||
clear
|
||||
echo ""
|
||||
echo "*** Check if TOR service is functional ***"
|
||||
torRunning=$(curl --connect-timeout 10 --socks5-hostname 127.0.0.1:9050 https://check.torproject.org | grep "Congratulations. This browser is configured to use Tor." -c)
|
||||
if [ ${torRunning} -gt 0 ]; then
|
||||
clear
|
||||
echo "You are all good - TOR is already running."
|
||||
echo ""
|
||||
exit 0
|
||||
else
|
||||
echo "TOR not running ... proceed with switching to TOR."
|
||||
echo ""
|
||||
fi
|
||||
|
||||
# ask user if to proceed
|
||||
dialog --title " WARNING " --yesno "At the moment you just can switch TOR on - YOU CANNOT SWITCH BACK. Do you want to proceed?" 8 57
|
||||
response=$?
|
||||
case $response in
|
||||
1) exit 1;
|
||||
esac
|
||||
|
||||
echo "*** Adding Tor Sources to sources.list ***"
|
||||
echo "deb http://deb.torproject.org/torproject.org stretch main" | sudo tee -a /etc/apt/sources.list
|
||||
echo "deb-src http://deb.torproject.org/torproject.org stretch main" | sudo tee -a /etc/apt/sources.list
|
||||
echo "OK"
|
||||
echo ""
|
||||
|
||||
echo "*** Installing dirmngr ***"
|
||||
sudo apt install dirmngr
|
||||
echo ""
|
||||
|
||||
## lopp: gpg --keyserver keys.gnupg.net --recv 886DDD89
|
||||
echo "*** Fetching GPG key ***"
|
||||
gpg --keyserver keys.gnupg.net --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89
|
||||
gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -
|
||||
echo ""
|
||||
|
||||
echo "*** Updating System ***"
|
||||
sudo apt-get update
|
||||
echo ""
|
||||
|
||||
echo "*** Install Tor ***"
|
||||
sudo apt install tor tor-arm -y
|
||||
|
||||
echo ""
|
||||
echo "*** Tor Config ***"
|
||||
sudo rm -r -f /mnt/hdd/tor 2>/dev/null
|
||||
sudo mkdir /mnt/hdd/tor
|
||||
sudo mkdir /mnt/hdd/tor/sys
|
||||
sudo mkdir /mnt/hdd/tor/web80
|
||||
sudo mkdir /mnt/hdd/tor/lnd9735
|
||||
sudo mkdir /mnt/hdd/tor/lndrpc9735
|
||||
sudo chmod -R 700 /mnt/hdd/tor
|
||||
sudo chown -R bitcoin:bitcoin /mnt/hdd/tor
|
||||
cat > ./torrc <<EOF
|
||||
### See 'man tor', or https://www.torproject.org/docs/tor-manual.html
|
||||
|
||||
DataDirectory /mnt/hdd/tor/sys
|
||||
PidFile /mnt/hdd/tor/sys/tor.pid
|
||||
|
||||
SafeLogging 0
|
||||
Log notice stdout
|
||||
Log notice file /mnt/hdd/tor/notice.log
|
||||
Log info file /mnt/hdd/tor/info.log
|
||||
|
||||
RunAsDaemon 1
|
||||
User bitcoin
|
||||
PortForwarding 1
|
||||
ControlPort 9051
|
||||
SocksPort 9050
|
||||
|
||||
CookieAuthFile /mnt/hdd/tor/sys/control_auth_cookie
|
||||
CookieAuthentication 1
|
||||
CookieAuthFileGroupReadable 1
|
||||
|
||||
# Hidden Service v2 for WEB ADMIN INTERFACE
|
||||
HiddenServiceDir /mnt/hdd/tor/web80/
|
||||
HiddenServicePort 80 127.0.0.1:80
|
||||
|
||||
# Hidden Service v2 for LND RPC
|
||||
HiddenServiceDir /mnt/hdd/tor/lndrpc10009/
|
||||
HiddenServicePort 80 127.0.0.1:10009
|
||||
|
||||
# Hidden Service v3 for LND incomming connections (just in case)
|
||||
# https://trac.torproject.org/projects/tor/wiki/doc/NextGenOnions#Howtosetupyourownprop224service
|
||||
HiddenServiceDir /mnt/hdd/tor/lnd9735
|
||||
HiddenServiceVersion 3
|
||||
HiddenServicePort 9735 127.0.0.1:9735
|
||||
|
||||
# NOTE: bitcoind get tor service automatically - see /mnt/hdd/bitcoin for onion key
|
||||
EOF
|
||||
sudo rm $torrc
|
||||
sudo mv ./torrc $torrc
|
||||
sudo chmod 644 $torrc
|
||||
sudo chown -R bitcoin:bitcoin /var/run/tor/
|
||||
echo ""
|
||||
|
||||
# NYX - Tor monitor tool
|
||||
# https://nyx.torproject.org/#home
|
||||
echo "*** Installing NYX - TOR monitoring Tool ***"
|
||||
# install setuptools required by NYX
|
||||
sudo pip install setuptools
|
||||
nyxInstalled=$(sudo pip list 2>/dev/null | grep 'nyx' -c)
|
||||
if [ ${nyxInstalled} -eq 0 ]; then
|
||||
sudo pip install nyx
|
||||
else
|
||||
echo "NYX already installed"
|
||||
fi
|
||||
echo ""
|
||||
|
||||
echo "*** Activating TOR system service ***"
|
||||
echo "ReadWriteDirectories=-/mnt/hdd/tor" | sudo tee -a /lib/systemd/system/tor@default.service
|
||||
sudo systemctl daemon-reload
|
||||
sudo systemctl restart tor@default
|
||||
echo ""
|
||||
|
||||
echo "*** Waiting for TOR to boostrap ***"
|
||||
torIsBootstrapped=0
|
||||
while [ ${torIsBootstrapped} -eq 0 ]
|
||||
do
|
||||
echo "--- Checking 1 ---"
|
||||
date +%s
|
||||
sudo cat /mnt/hdd/tor/notice.log 2>/dev/null | grep "Bootstrapped" | tail -n 10
|
||||
torIsBootstrapped=$(sudo cat /mnt/hdd/tor/notice.log 2>/dev/null | grep "Bootstrapped 100" -c)
|
||||
echo "torIsBootstrapped(${torIsBootstrapped})"
|
||||
echo "If this takes too long --> CTRL+c, reboot and check manually"
|
||||
sleep 5
|
||||
done
|
||||
echo "OK - Tor Bootstrap is ready"
|
||||
echo ""
|
||||
|
||||
echo "*** Changing ${network} Config ***"
|
||||
networkIsTor=$(sudo cat /home/bitcoin/.${network}/${network}.conf | grep 'onlynet=onion' -c)
|
||||
if [ ${networkIsTor} -eq 0 ]; then
|
||||
|
||||
echo "Only Connect thru TOR"
|
||||
echo "onlynet=onion" | sudo tee --append /home/bitcoin/.${network}/${network}.conf
|
||||
|
||||
if [ "${network}" = "bitcoin" ]; then
|
||||
echo "Adding some bitcoin onion nodes to connect to"
|
||||
echo "addnode=fno4aakpl6sg6y47.onion" | sudo tee --append /home/bitcoin/.${network}/${network}.conf
|
||||
echo "addnode=toguvy5upyuctudx.onion" | sudo tee --append /home/bitcoin/.${network}/${network}.conf
|
||||
echo "addnode=ndndword5lpb7eex.onion" | sudo tee --append /home/bitcoin/.${network}/${network}.conf
|
||||
echo "addnode=6m2iqgnqjxh7ulyk.onion" | sudo tee --append /home/bitcoin/.${network}/${network}.conf
|
||||
echo "addnode=5tuxetn7tar3q5kp.onion" | sudo tee --append /home/bitcoin/.${network}/${network}.conf
|
||||
fi
|
||||
|
||||
sudo cp /home/bitcoin/.${network}/${network}.conf /home/admin/.${network}/${network}.conf
|
||||
sudo chown admin:admin /home/admin/.${network}/${network}.conf
|
||||
|
||||
else
|
||||
echo "Chain network already configured for TOR"
|
||||
fi
|
||||
|
||||
echo "*** ${network} re-init - Waiting for Onion Address ***"
|
||||
# restarting bitcoind to start with tor and generare onion.address
|
||||
echo "restarting ${network}d ..."
|
||||
sudo systemctl restart ${network}d
|
||||
sleep 8
|
||||
onionAddress=""
|
||||
while [ ${#onionAddress} -eq 0 ]
|
||||
do
|
||||
echo "--- Checking 2 ---"
|
||||
date +%s
|
||||
testNetAdd=""
|
||||
if [ "${chain}" = "test" ];then
|
||||
testNetAdd="/testnet3"
|
||||
fi
|
||||
sudo cat /mnt/hdd/${network}${testNetAdd}/debug.log 2>/dev/null | grep "tor" | tail -n 10
|
||||
onionAddress=$(sudo -u bitcoin ${network}-cli getnetworkinfo | grep '"address"' | cut -d '"' -f4)
|
||||
echo "Can take up to 20min - if this takes longer --> CTRL+c, reboot and check manually"
|
||||
sleep 5
|
||||
done
|
||||
onionPort=$(sudo -u bitcoin ${network}-cli getnetworkinfo | grep '"port"' | tr -dc '0-9')
|
||||
echo "Your Chain Network Onion Address is: ${onionAddress}:${onionPort}"
|
||||
echo ""
|
||||
|
||||
echo "*** Setting your Onion Address ***"
|
||||
onionLND=$(sudo cat /mnt/hdd/tor/lnd9735/hostname)
|
||||
echo "Your Lightning Tor Onion Address is: ${onionLND}:9735"
|
||||
echo ""
|
||||
|
||||
# ACTIVATE LND OVER TOR
|
||||
echo "*** Putting LND behind TOR ***"
|
||||
echo "Disable LND again"
|
||||
sudo systemctl disable lnd
|
||||
echo "Writing Public Onion Address to /run/publicip (just in case for TotHiddenServiceV3)"
|
||||
echo "PUBLICIP=${onionLND}" | sudo tee /run/publicip
|
||||
echo "Configure and Changing to lnd.tor.service"
|
||||
sed -i "5s/.*/Wants=${network}d.service/" ./assets/lnd.tor.service
|
||||
sed -i "6s/.*/After=${network}d.service/" ./assets/lnd.tor.service
|
||||
sudo cp /home/admin/assets/lnd.tor.service /etc/systemd/system/lnd.service
|
||||
sudo chmod +x /etc/systemd/system/lnd.service
|
||||
echo "Enable LND again"
|
||||
sudo systemctl enable lnd
|
||||
echo "OK"
|
||||
echo ""
|
||||
|
||||
echo "*** Finshing Setup / REBOOT ***"
|
||||
echo "OK - all should be set"
|
||||
echo ""
|
||||
echo "PRESS ENTER ... to REBOOT"
|
||||
read key
|
||||
|
||||
sudo shutdown -r now
|
||||
exit 0
|
Loading…
x
Reference in New Issue
Block a user