Skip to content
Snippets Groups Projects
Select Git revision
  • a35ddfb6255becdda79f4be01b2bca17996c5f54
  • master default protected
  • ndk_28c
  • tor-0.4.8.16
  • tor-0.4.8.13
  • trivial-patch
  • quick-upstream-build
  • ci-image-upstream-reproducer
  • tor-0.4.7.12
  • armv6
  • tor-0.3.5.11
  • tor-0.4.3.6
  • 0.4.0.2-alpha
  • 0.3.5.17
  • 0.3.5.9
  • 0.3.5.8-64
  • 0.3.5.8
  • 0.3.5.7
  • 0.3.4.8
  • 0.2.9.16
20 results

tor-reproducer

  • Clone with SSH
  • Clone with HTTPS
  • user avatar
    a35ddfb6
    History

    Tor Reproducer

    This is a tool you can use to verify that the version of Tor used by Briar was built exactly from the public source code and no modifications (such as backdoors) were made.

    More information about these so called reproducible builds is available at reproducible-builds.org.

    The source code for this tool is available at https://code.briarproject.org/briar/tor-reproducer

    How to use

    Make sure the version of Tor you want to verify is included in tor-versions.json.

    Verify that you have docker installed:

    docker --version

    If this command does not work, please install Docker and continue once it is installed.

    Using our pre-built image

    If you trust that our pre-built Docker image was build exactly from its source, you can use it for faster verification. If not, you can read the next section to learn how to build the image yourself. Then you are only trusting the official debian:stable which is out of our control.

    Otherwise, you can skip the next section and move directly to Run the verification.

    Building your own image

    Check out the source repository:

    git clone https://code.briarproject.org/briar/tor-reproducer.git

    Build our Docker image:

    docker build -t briar/tor-reproducer tor-reproducer

    Run the verification

    To verify a specific version of Briar, run

    docker run briar/tor-reproducer:latest ./build-tor.py [tag]

    Where [tag] is the git tag (source code snapshot) that identifies the version of Tor you want to test, for example tor-0.3.3.6.

    You can find a list of tags in Tor's source code repository.