NewNewYorkBridges / ansible-tor-bridge

Ansible role to deploy Tor Bridge nodes.
GNU General Public License v3.0
7 stars 5 forks source link

feature request: use obfs4proxy from the -backports (under Debian) #20

Open toralf opened 2 years ago

toralf commented 2 years ago

There was a recent discussion at the Tor relay mailing list to run the latest obfs4proxy.. At least for Debian (bullseye) this is advised:

Yes, first edit '/etc/apt/sources.list':

# bullseye-backports, previously on backports.debian.org
deb http://deb.debian.org/debian/ bullseye-backports main
#deb-src http://deb.debian.org/debian/ bullseye-backports main

Then install:

apt update
apt install -t bullseye-backports obfs4proxy

which needs slightly adaption to the current ansible code.

toralf commented 2 years ago

So something like

- name: obfs4proxy installation
  ansible.builtin.apt:
    name: "obfs4proxy"
    default_release: "bullseye-backports"
    update_cache: yes
    state: latest

is needed to close the security gap which is in the stable Debian package.