| @@ -6,45 +6,45 @@ | |||
| ## Installation | |||
| - install VirtualBox for your OS | |||
| - create a new VM and make sure you have: | |||
| - download the current release of debian9 https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/ (take the netinst image) | |||
| - install debian9 and make sure you do the following during installation: | |||
| - finish install and reboot | |||
| - after reboot, login and sudo su to become root | |||
| - install git client `apt-get install git` | |||
| - download installation setup `git clone https://git.home.spale.com/home/torvm.git` | |||
| - in the VirtualBox VM "Devices" menu, select "Install Guest Additions CD Image..." (needed by the next step) | |||
| - cd torvm and run `./install.sh` (still as root) | |||
| - `reboot` | |||
| - gdm should start after boot and you can then login and follow the setup wizard of enlightenment | |||
| * install VirtualBox for your OS | |||
| * create a new VM and make sure you have | |||
| * enabled 3D acceleration | |||
| * enabled NAT networking | |||
| * download the current release of debian9 https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/ (take the netinst image) | |||
| * install debian9 and make sure you do the following during installation: | |||
| * partition disk with LVM and crypto (use a long password, possibly a sentence) | |||
| * don't allow root login, create an anonymous user account (for example "user") | |||
| * unselect everything at tasksel (Desktop installation, print server,...) | |||
| * finish install and reboot | |||
| * after reboot, login and sudo su to become root | |||
| * install git client `apt-get install git` | |||
| * download installation setup `git clone https://git.home.spale.com/home/torvm.git` | |||
| * in the VirtualBox VM "Devices" menu, select "Install Guest Additions CD Image..." (needed by the next step) | |||
| * cd torvm and run `./install.sh` (still as root) | |||
| * `reboot` | |||
| * gdm should start after boot and you can then login and follow the setup wizard of enlightenment | |||
| ## What's in the installer script ? | |||
| - Install various packages including but not limited to, enlighenment window manager, gdm login, Xorg, redsocks, tor, iptables-persistent, firefox-esr, transmission, unbound, ... | |||
| - Remove nano, because <full stop> | |||
| - mount and compile VirtualBox drivers | |||
| - copy configured configuration files for unbound, redsocks and iptables | |||
| - disable IPv6 via `/etc/sysctl.conf` | |||
| - install a preconfigured firefox profile for all existing users (except root) | |||
| - delete all .bash_history files and replace them by symblink to `/dev/null` | |||
| - clean apt cache | |||
| - stop syslog (temporarly) and delete all files in `/var/log` | |||
| * Install various packages including but not limited to, enlighenment window manager, gdm login, Xorg, redsocks, tor, iptables-persistent, firefox-esr, transmission, unbound, ... | |||
| * Remove nano, because <full stop> | |||
| * mount and compile VirtualBox drivers | |||
| * copy configured configuration files for unbound, redsocks and iptables | |||
| * disable IPv6 via `/etc/sysctl.conf` | |||
| * install a preconfigured firefox profile for all existing users (except root) | |||
| * delete all .bash_history files and replace them by symblink to `/dev/null` | |||
| * clean apt cache | |||
| * stop syslog (temporarly) and delete all files in `/var/log` | |||
| ## What's in this firefox profile ? | |||
| - security settings | |||
| - default search engine set to duckduckgo | |||
| - disabled saving passwords, history, ... | |||
| - preconfigured socks proxy (it's still faster than doing REDIRECT in iptables, going over redsocks to finally land in the tor socks5 server) | |||
| - preinstalled add-ons: | |||
| * security settings | |||
| * default search engine set to duckduckgo | |||
| * disabled saving passwords, history, ... | |||
| * preconfigured socks proxy (it's still faster than doing REDIRECT in iptables, going over redsocks to finally land in the tor socks5 server) | |||
| * preinstalled add-ons: | |||
| * NoScript (default configuration) | |||
| * uBlock Origin (default configuration) | |||
| ## Should I trust you? | |||