Running a bridge on a raspberry pi 4

I don’t mean to pick nits, but Raspbian/RaspiOS is not Debian-- just the same that Ubuntu is not Debian. The builds/repos are different and Raspbian has even gotten architecture naming screwed up (see: armhf on Raspbian is not the same thing as armhf on Debian) … this has led to people trying to use Debian packages from Raspbian and finding out they don’t work.

I’m not sure about Raspi’s packaging of tor, but I know that Ubuntu’s repo has not been good about keeping up. In the case of Ubuntu it’s certainly better to use Tor Project’s repo until Ubuntu establishes a better track record of updating tor.

If the only intent for the rpi4 target is to run a bridge, Debian with Tor Project’s repo seems like the best bet. Unless there’s something drastically wrong with Debian on Raspberry Pis that I’m not aware of.

2 Likes

Thank you, yes I wanted to go for the raspberry 64 bit os, but rather bullseye I think.

So, I now use arm64
PRETTY_NAME=“Debian GNU/Linux 11 (bullseye)”
NAME=“Debian GNU/Linux”
VERSION_ID=“11”
VERSION=“11 (bullseye)”

When trying to apt update Im getting:

E: The repository 'https://deb.torproject.org/torproject.org bullseye Release' does not have a Release file.

But its there and the codename is most likely correct. :thinking:

Maybe this https://unix.stackexchange.com/questions/371890/debian-the-repository-does-not-have-a-release-file will help you.

Full disclosure: I do not run any debian/debian-derived systems currently.

1 Like

There is a bullseye: https://deb.torproject.org/torproject.org/dists/bullseye/, there is a Release file in it. What is your apt source for deb.torproject.org?

1 Like

Thank you, but it was much more dumb, I was supposed to replace <DISTRIBUTION> to bullseye, not <bullseye> :see_no_evil: :see_no_evil:

Alright, now I got version 0.4.6.8.

But even before adding the repository manually, I could have installed
tor | 0.4.5.10-1~deb11u1
unlike before when I used the raspios buster armhf release.

1 Like

If docker is an option there is a docker image for arm64:
https://community.torproject.org/relay/setup/bridge/docker/

2 Likes

Just a little bit nit picky, but I feelz ya!
I didn’t really want to get into the distro thing just trying to help out someone do what I just did, but I was running 10 and not 11 as I already had the unit doing other stuff on my LAN.

Nice one, I’ve been looking around the site and based on some of the posts I’ve seen I think I may consider getting BSD running on another Pi4 and patch that to my 2nd WAN link for another bridge. A project for the Christmas break, possibly.

1 Like

Thank you alot !

So far I stuck with

Unable to find IPv4 address for ORPort 443. You might want to specify IPv6Only to it or set an explicit address or set Address.

I used the flag IPv4Only, otherwise I would get the same message but telling me it couldnt find ipv6 address and I might want to specify IPv4Only.

This didnt help me:
https://www.reddit.com/r/TOR/comments/lkkzf1/tor_bridge_cannot_find_ipv4_address/

I also deactivated ipv6 in my os for that.

I there any common thing I need to set in my router when setting up a relay ?
Ipv6 is deactivated by default in my router, but I dont know what else to consider doing that so I wanted to ignore it first. I dont like activating things I dont actually comprehend.

If your relay is running on a internal net, you need to setup port forwarding. Check this https://portforward.com/ for directions on how to port forward with your NAT/router device.

If you have only a dynamic IP address, maybe you should run a Standalone snowflake proxy: Tor Project | Standalone Snowflake proxy

If your relay is running on a internal net, you need to setup port forwarding. Check this https://portforward.com/ for directions on how to port forward with your NAT/router device.

Thanks I found that in my router but wasnt sure If I actually need to do something there.

If you have only a dynamic IP address, maybe you should run a Standalone snowflake proxy: Tor Project | Standalone Snowflake proxy

Doesnt every common home network user have only a dynamic public ip address ?
I checked my isp, its a thing only available for office contracts.
I havent seen it changes for a couple days now, I dont know the lifecycle but its not like every hour.

Why cant tor check if there is a new public ip and if yes restart all steps and re-release the server automatically on the same identity ?
When bridges are blacklisted for whatever reason, dont they need to restart with a new address anyways ?

Tor will do that, but users will need to ‘discover’ your bridge’s IP address again, i.e., go over the process of requesting a new bridge (by email, Moat or https). On the other hand, Snowflake will discover your proxy new IP and automatically share with them.

Yes, but the time frame of rotating static IP addresses would be days/weeks/months and not hours.

1 Like

Yes pretty much all ISP will provide a dynamic IP unless a static one is requested.
I have 2 domestic connections but requested static IP’s from ISP.
They just charge a few extra $$ for this.

1 Like

Unfortunately its not simply a little upgrade to buy on top for me. A rented server would be less expensive for me. (If i find something cheap I will do that)
Ill monitor how often my address changes for now.

Cant users refer to a constant identity instead ?
Anyways, Ill gladly run a snowflake then.
What about sparing it as a middle relay ? Is a static ip just as critical here ?

Ouch! I’ve got a mate that has been using https://www.hetzner.com/ for years and swears by them for price, speeds and tech support.

1 Like

Yes I would appreciate if you could share this with me !

  1. Nov. 2021, 16:33 von torproject1@discoursemail.com:
···


|
Cefiro

November 26

|

  • | - |

I have a bridge installed on a Raspberry Pi 3B + with the latest version of Raspberry Pi OS Lite (32 bits), based on Debian 11 Bullseye, and it works very well. Tor versión is 0.4.5.10. My IP is dynamic, but it doesn’t change frequently; it can go several days without changing (even up to two weeks).

If you need it, I can show you step by step the procedure that I have used to configure my bridge. It’s simple.

Greetings.


Visit Topic or reply to this email to respond.

To unsubscribe from these emails, click here.

So ive been logging my public ip for several day now and its always the same, the internet provider forces a reconnect every night at the same time, its called a forced disconnect for technical reasons each 24 hours.
Its in their faq stated that you cannot avoid this: statement in german
You can change the time for the reconnect but not that it will happen once a day. From what I learned its a common thing in germany.
And this would always assign a new ip.
Alright this leaves me with the snowflake and the rented server option.

edit: although the docs say: Your IPv4 address should remain unchanged for at least 3 hours, so 24 isnt that bad right

The bridge is reachable and obfs4: functional. Should I schedule a restart task for tor right after the forced ip reset or is it best to just keep it running ?
Is it harmful to run a snowflake additionally on the same device ?