packages/net/snowflake/files, branch masterMirror of packages feedhttps://git.openwrt.org/feed/packages/atom?h=master2026-04-19T15:45:57Zsnowflake: mount default geoip paths2026-04-19T15:45:57Zmatzfan2026-03-30T14:59:03Zurn:sha1:a6f5b115bba23cc1a108a601acfca1fab823a092
-metrics option requires access to these files to geolocate clients
Signed-off-by: matzfan <matzfan@mailinator.com>
snowflake: run snowflake-proxy with procd-ujail2022-09-25T00:38:09ZDaniel Golle2022-09-25T00:28:43Zurn:sha1:0f3d48a3784fb495ffdfe4a83f540ad42fab89df
snowflake-proxy doesn't write any files
=> run in read-only rootfs environment
the process needs to read SSL certs but no other files
=> only exposed path is /etc/ssl/certificates (read-only)
running as unpriviledged user with no additional capabilities
=> set no-new-privs bit
By default procd-ujail also isolates the process by executing it in
a separate new IPC and PID namespace.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
snowflake: add package2022-09-24T18:06:47ZDaniel Golle2022-09-24T02:03:22Zurn:sha1:cf120a7effd5d13a7f705b5eb9d22410b73d71f3
Package Tor's Snowflake system components so users can offer e.g.
a standalone Snowflake proxy on their routers or other devices.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>