Re: Routing Guix services traffic trough Tor

[Ludovic Courtès]

Hi Brice,

Brice Waegeneire <address@hidden> skribis:

> Today I played a bit with Tor and Guix, trying to fetch substitutes 
> trough
> the Tor network as blaze_cornbread asked on IRC[0] how to do this.  I
> managed to get it working but in the end I don't think we should 
> encourage
> people doing it this way, that's why I haven't submitted a patch to the
> cookbook for it.  Currently the only supported way to proxy traffic for
> 'guix-daemon' is by setting a HTTP proxy[1] the drawback is that DNS 
> query
> will still be in clear and wont go trough the proxy in contrast to a 
> SOCKS5
> proxy where the query will happen on the other side of the proxy.

I don’t think that’s the case: when an HTTP proxy is in use, clients
make a CONNECT or GET HTTP request to the proxy, which resolves the host
name on their behalf.  That’s why you can pass
‘--substitute-urls=http://bp7o7ckwlewr4slm.onion’ and it Just Works.

So I think you message could make a great section in the cookbook.  :-)

Thanks,
Ludo’.