whn0thacked/arti-docker repository overview

services:
  arti:
    image: whn0thacked/arti-docker:latest
    container_name: arti
    restart: unless-stopped
    environment:
      RUST_LOG: "info"
    ports:
      - "127.0.0.1:9050:9050/tcp"
      # - "127.0.0.1:9053:9053/tcp"
      # - "127.0.0.1:9053:9053/udp"
    volumes:
      - arti-data:/var/lib/arti
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    read_only: true
    tmpfs:
      - /tmp:rw,nosuid,nodev,noexec,size=64m
    deploy:
      resources:
        limits:
          cpus: "1.0"
          memory: 512M
        reservations:
          cpus: "0.1"
          memory: 128M
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "5"
        compress: "true"
    stop_grace_period: 30s

volumes:
  arti-data:

docker compose up -d

curl --socks5-hostname 127.0.0.1:9050 https://check.torproject.org/api/ip
# {"IsTor":true,"IP":"xxx.xxx.xxx.xxx"}

docker run -d --name arti \
  -p 127.0.0.1:9050:9050 \
  -v arti-data:/var/lib/arti \
  --read-only --tmpfs /tmp:rw,nosuid,nodev,noexec,size=64m \
  --security-opt no-new-privileges:true --cap-drop ALL \
  --memory 512m --cpus 1.0 \
  --restart unless-stopped \
  whn0thacked/arti-docker:latest

proxy --disable-fs-permission-checks \
  -o "proxy.socks_listen=[\"0.0.0.0:9050\"]" \
  -o "proxy.dns_listen=[\"0.0.0.0:9053\"]"

docker run ... whn0thacked/arti-docker:latest proxy -c /etc/arti.toml
docker run ... whn0thacked/arti-docker:latest proxy --socks-port 1080
docker run ... whn0thacked/arti-docker:latest keys list

docker run -d --name arti \
  -p 127.0.0.1:9050:9050 \
  -v ./arti.toml:/etc/arti.toml:ro \
  -v arti-data:/var/lib/arti \
  --read-only --tmpfs /tmp:rw,nosuid,nodev,noexec,size=64m \
  --security-opt no-new-privileges:true --cap-drop ALL \
  whn0thacked/arti-docker:latest \
  proxy --disable-fs-permission-checks -c /etc/arti.toml

docker run -d --name arti \
  -p 127.0.0.1:9050:9050 \
  -p 127.0.0.1:9053:9053 \
  whn0thacked/arti-docker:latest \
  proxy \
  --disable-fs-permission-checks \
  -o 'proxy.socks_listen=["0.0.0.0:9050"]' \
  -o 'proxy.dns_listen=["0.0.0.0:9053"]' \
  -l debug

# Enable DNS port in compose or docker run:
# -p 127.0.0.1:9053:9053/tcp -p 127.0.0.1:9053:9053/udp

dig @127.0.0.1 -p 9053 torproject.org
nslookup torproject.org 127.0.0.1 -port=9053

# curl
curl --socks5-hostname 127.0.0.1:9050 https://example.onion

# Environment variable (works with many apps)
ALL_PROXY=socks5h://127.0.0.1:9050 curl https://check.torproject.org/api/ip

# proxychains
echo "socks5 127.0.0.1 9050" >> /etc/proxychains.conf
proxychains curl https://check.torproject.org/api/ip

# Firefox: Settings → Network → Manual Proxy → SOCKS Host: 127.0.0.1:9050
# ✅ Check "Proxy DNS when using SOCKS v5"

docker run -d --name arti-hs \
  -v ./arti.toml:/etc/arti.toml:ro \
  -v arti-keys:/var/lib/arti/keys \
  -v arti-data:/var/lib/arti \
  --read-only --tmpfs /tmp:rw,nosuid,nodev,noexec,size=64m \
  --security-opt no-new-privileges:true --cap-drop ALL \
  whn0thacked/arti-docker:latest \
  proxy --disable-fs-permission-checks -c /etc/arti.toml

docker run --rm whn0thacked/arti-docker:latest keys list
docker run --rm whn0thacked/arti-docker:latest keys list-keystores
docker run --rm whn0thacked/arti-docker:latest keys check-integrity

# With mounted keys volume:
docker run --rm -v arti-keys:/var/lib/arti/keys:ro \
  whn0thacked/arti-docker:latest hsc key list

docker buildx build \
  --platform linux/amd64,linux/arm64 \
  -t whn0thacked/arti-docker:latest \
  --push .

docker buildx build \
  --build-arg ARTI_REF=ba4163ed943a67cd8a55f7291797fb22a788f950 \
  -t whn0thacked/arti-docker:dev \
  --push .

docker buildx build --load -t arti:test .
docker run --rm arti:test --version