Tse Kit Yam’s site

How to setup tor relays with ansible-relayor

2021-11-21T00:00:00+00:00

Introduction

This guide documented how to use ansible to setup tor relays on a VPS.

Prerequisites

A local PC, installed with Ubuntu 20.04 LTS
- can connect to VPS with SSH key
A VPS, installed with Ubuntu 20.04 LTS
- port 443 should be opened in firewall
- user account should have sudo permission

Steps

Install python3 and tor on local PC

$ sudo apt update
$ sudo apt install python3 tor

Install ansible on local PC
```
$ pip3 install ansible
```

Install nusenu.relayor

$ ansible-galaxy install nusenu.relayor

Install nusenu.relayor dependency on local PC
```
$ pip3 install netaddr
```

Create new workspace

$ mkdir ~/my-tor-relays
$ cd ~/my-tor-relays

Create hosts file
```
$ touch ./hosts
```
hosts contains connection to the VPS. It should looks like
```
[tag]
ubuntu@example.com
```
[tag] is for grouping relays with the same configuration.

For example, we may have three VPS, two with 1TB monthly traffic and one with 2TB month traffic. Then we can have two tags [1000GB] and [2000GB], and set the monthly traffic allowance on the relays in these two groups to 1TB and 2TB respectively. Our hosts may looks like
```
[1000GB]
ubuntu@a.example.com
[2000GB]
ubuntu@b.example.com
ubuntu@c.example.com
```

Create playbook file

$ touch ./playbook.yml

playbook.yml contains configuration for the relay. The file should at least contains our contact information with tor_ContactInfo. It should look like:

- hosts: tag
vars:
   tor_ContactInfo: relay-operator@example.com
roles:
   - nusenu.relayor

If we want to have two groups of relays with different monthly traffic allowed, we can set the monthly limit with tor_AccountingMax, such that our playbook.yml may looks like

- hosts: 1000GB
vars:
   tor_ContactInfo: relay-operator@example.com
   tor_AccountingMax: 1000 GBytes
roles:
   - nusenu.relayor

- hosts: 2000GB
vars:
   tor_ContactInfo: relay-operator@example.com
   tor_AccountingMax: 2000 GBytes
roles:
   - nusenu.relayor

Execute the playbook to enable tor relay service on VPS
```
$ ansible-playbook playbook.yml -l all -i ./hosts
```
After successfully executing the playbook, we should follow Relay Post-install and good practices to ensure our service is up and running.

Conclusion

In this post, we walked throught how to setup tor relay service on VPS using nusenu.relayor.

Two options tor_ContactInfo and tor_AccountingMax are introduced. There are many more available options, please refer to ansible-relayor doc to see more.

It is encouraged to use ContactInfo Information Sharing Specification to publish useful contact information with tor_ContactInfo.

It is recommanded to read this blog post to understand the lifecycle of a new relay that we just setup.

How to create GitHub user site with Jekyll

2021-08-30T00:00:00+00:00

This is how I created this GitHub user site with Jekyll on macOS.

Prerequisites

A GitHub user site

If you don’t have a GitHub user site, please follow Creating a GitHub Pages site to create one

Instructions

Set up environment

Install bundler and jekyll without root

$ gem install --user-install bundler jekyll

Check ruby version

$ ruby -v
ruby 2.6.3p62 (2019-04-16 revision 67580) [universal.x86_64-darwin20]

Add gems path to shell configuration

# If your ruby version is not 2.6.X,
# then you need to replace 2.6 with the first two digit of your ruby version
$ echo 'export PATH="$HOME/.gem/ruby/2.6.0/bin:$PATH"' >> ~/.zshrc

Clone <user>.github.io repository

# Replace <user> with your username
$ git clone https://github.com/<user>/<user>.github.io
$ cd <user>.github.io

Create the site

Create a new Jekyll site
```
$  jekyll new --skip-bundle .
```
Enable GitHub page in the site
1. open Gemfile file
2. add # to the beginning of the line starts with gem "jekyll"
3. remove # from the line starts with # gem "github-pages"
4. install the gem
```
$ bundle config set --local path 'vendor/bundle'
$ bundle install
```
Testing the site locally with Jekyll
1. build the site and make it available in local server
```
$ bundle exec jekyll serve
```
2. browser to http://localhost:4000

Publish the site

commit the code to GitHub

$ git add .
$ git commit -m 'Initial GitHub pages site with Jekyll'
$ git push

Your site should be available at https://<user>.github.io after a few minutes.

Tse Kit Yam’s site

How to setup tor relays with ansible-relayor

Introduction

Prerequisites

Steps

Conclusion

How to create GitHub user site with Jekyll

Prerequisites

Instructions

Set up environment

Create the site

Publish the site

See also