tor-webwml.git

1) ## translation metadata
2) # Revision: $Revision$
3) 
4) #include "head.wmi" TITLE="Tor VM"
5) 
6) <div class="main-column">
7) 
8) <!-- PUT CONTENT AFTER THIS TAG -->
9) 

10) <h1>Tor VM</h1>

11) 

12) <h2>What Is It?</h2>
13) <p>Tor VM is an experimental transparent Tor proxy for Windows that uses Qemu

14) virtualization technology for more resilient Tor clients and relays.

15) </p>

16) <p><strong>This initial 0.0.1 release is a work in progress!</strong>

17) See the
18) <a href="http://bugs.noreply.org/flyspray/index.php?tasks=all&amp;project=4&amp;cat=19"
19) >bug tracking database for known issues</a>. Remember to backup anything

20) important before using this software on your system.</p>
21) 

22) 
23) <hr />

24) <a id="Download"></a>

25) <h2><a class="anchor" href="#Download">Step One: Download Tor VM Software</a></h2>

26) 

27) <p>The bundle packages are preferred since they include Vidalia and other Tor
28) software that improves the user experience. If a portable Tor VM instance is
29) required then the self extracting archive can be used to install Tor VM alone
30) onto a portable storage device and run wheverever administrator rights are
31) available to you.</p>

32) 

33) <ul>

34) <li><a href="dist/TorVM-0.0.1-NetInstaller.exe">Tor VM Network Installer</a>

35) (<a href="dist/TorVM-0.0.1-NetInstaller.exe.asc" style="font-size: 90%;">sig</a>)</li>

36) 

37) <li><a href="dist/TorVM-0.0.1-Bundle.exe">Tor VM Bundle Installer</a>

38) (<a href="dist/TorVM-0.0.1-Bundle.exe.asc" style="font-size: 90%;">sig</a>)</li>

39) 

40) <li><a href="dist/Tor_VM.exe">Tor VM Portable Self Extractor</a>

41) (<a href="dist/Tor_VM.exe.asc" style="font-size: 90%;">sig</a>)</li>

42) </ul>
43) 

44) <hr />

45) <a id="Setup"></a>

46) <h2><a class="anchor" href="#Setup">Step Two: Configure Windows For Less Risk</a></h2>

47) 
48) <p>Running Firefox with Torbutton as a reduced privilege user provides
49) defense in depth against various risks Internet users face. These steps
50) explain how to create a restricted account for user name "anon".</p>
51) 

52) <p>Navigate to the control panel "User Accounts" option. You can also use
53) the menu navigation:<br />
54) <!-- should this be a sequence of <span> instead? -->
55) <strong>Start Menu -&gt; Settings -&gt; Control Panel -&gt; Add or Remove Programs</strong></p>

56) 
57) <p><img src="img/uc01.png" alt="Control panel view - Select User Accounts option" /></p>
58) 
59) <p>Select "Create a new account".</p>
60) 
61) <p><img src="img/uc02.png" alt="User Accounts Tool - Select Create a new account" /></p>
62) 
63) <p>Provide a nickname for the anonymous limited user account.</p>
64) 
65) <p><img src="img/uc03.png" alt="Provide a nickname for the restricted account" /></p>
66) 
67) <p>Choose the "Limited" account type for the reduced privilege user feature.</p>
68) 
69) <p><img src="img/uc04.png" alt="Choose the Limited account type" /></p>
70) 
71) <p>Select "Create Account".</p>
72) 
73) <p><img src="img/uc05.png" alt="Select Create Account" /></p>
74) 
75) <p>The new user is added to the list of accounts on the local system. This is
76) the account that Internet applications like Firefox will run as when using
77) Tor VM to route traffic through the Tor network.
78) </p>
79) 
80) <p><img src="img/uc06.png" alt="New user is available for login session" /></p>
81) 
82) <p>The Switch User feature is used to run critical Tor VM software as Admin
83) while Firefox and other Internet applications run with restricted rights.</p>
84) 
85) <p><img src="img/uc07.png" alt="Use switch user to log in as restricted user" /></p>
86) 
87) <p>The new limited user desktop has its own configuration and environment.</p>
88) 
89) <p><img src="img/uc09.png" alt="Both Tor VM admin and restricted user can be used concurrently" /></p>
90) 

91) 
92) <hr />
93) <a id="InstallExtractor"></a>
94) <h2><a class="anchor" href="#InstallExtractor">Step Three: Tor VM Self-Extractor</a></h2>

95) 
96) <p>Save the installer executable to Desktop or portable storage.</p>
97) 
98) <p><img src="img/extr01.png" alt="Save installer exe to desktop or drive" /></p>
99) 
100) <p>Select the path or folder to extract into.</p>
101) 
102) <p><img src="img/extr02.png" alt="Select path for destination" /></p>
103) 
104) <p>Run the torvm.exe program in the extracted Tor_VM folder.</p>
105) 
106) <p><img src="img/extr03.png" alt="Run the torvm.exe program in the Tor_VM folder" /></p>
107) 

108) <h2><a class="anchor" href="#Run">Proceed to: Run Tor VM</a></h2>
109) 

110) 

111) <hr />
112) <a id="InstallBundle"></a>
113) <h2><a class="anchor" href="#InstallBundle">Step Three: Install Tor VM Bundle</a></h2>
114) 
115) <p>The bundle installers include Vidalia and other software for the local
116) machine instead of a portable folder. Double click on the Bundle or
117) Network Installer EXE to begin installation to the current system.</p>

118) 

119) <p><img src="img/bundle01.png" alt="Click to Run Bundle Installer" /> &nbsp;
120) <img src="img/netinst01.png" alt="Click to Run Network Installer" /></p>

121) 

122) <p>The bundle package installs each of the applications included with Tor VM like 
123) Vidalia and Tor Button.</p>
124) 
125) <p><img src="img/bundle02.png" alt="Click to Run Bundle Installer" /></p>
126) 

127) <p>The network installer contains the secure Tor updater software that is used
128) to reliably download all of the latest bundle application packages on demand.</p>
129) 
130) <p><img src="img/netinst02.png" alt="Network Installer downloads bundle software on demand" /></p>
131) 

132) 
133) <hr />

134) <a id="Run"></a>

135) <h2><a class="anchor" href="#Run">Step Four: Run Tor VM</a></h2>

136) 

137) <p>After installing the bundle packages a Tor VM controller is started in
138) the background. The installer program has finished and can be closed.</p>

139) 

140) <p><img src="img/run01.png" alt="Tor VM controller will start at end of install" /></p>

141) 
142) <p>After preparing network devices a Qemu virtual machine running the
143) Tor VM kernel is launched. A status screen will be shown detailing progress
144) bootstrapping the Tor software into the network.</p>
145) 
146) <p><img src="img/run02.png" alt="Qemu launched with Tor VM kernel" /></p>
147) 
148) <p>The bootstrap is 100% complete when Tor is able to create a circuit
149) through the network.</p>
150) 
151) <p><img src="img/run03.png" alt="Bootstrap not complete until circuit created" /></p>
152) 

153) <p>If you are running the Tor VM bundle Vidalia will also display the current
154) progress while bootstrapping into the Tor network.</p>
155) 
156) <p><img src="img/vidalia-bootstrap.png" alt="Vidalia will also show bootstrap status" /></p>
157) 

158) <p>After successful start a list of transparent proxy connection counts are
159) shown. This indicates that Tor VM is up and ready to start transparently
160) routing traffic through the Tor network. The socks port is also available to
161) the host for use with Polipo or Privoxy http proxies.</p>
162) 
163) <p><img src="img/run04.png" alt="Proxy traffic connection counts show Tor VM status" /></p>
164) 
165) <!-- no marble for first release

166) <p>The first time Vidalia is run the image tiles needed for the Marble Map
167) plugin will be generated at start. If you do not have sufficient memory or
168) CPU to generate these tiles you can install the full Vidalia Marble package
169) with the generated image tiles already included.</p>

170) 

171) <p><img src="img/vidalia-genmap.png" alt="It may take a minute to generate the Marble Map image tiles" /></p>

172) 

173) <p>If any of the bundle applications stop working a repair can be requested
174) which may resolve the problem.</p>

175) -->

176) 
177) 

178) <hr />
179) <a id="RecommendedUse"></a>
180) <h2><a class="anchor" href="#RecommendedUse">Step Five: Using Firefox and TorButton</a></h2>

181) 

182) <p>You should run Firefox and other Internet software as a restricted user.
183) Switch to the restricted user account configured in <a class="anchor" href="#Setup">Step Two</a>.</p>

184) 

185) <p>Press The Windows Key + L to switch users, or select the "Log off"
186) Start Menu option followed by "Switch User"</p>
187) 
188) <p><img src="img/" alt="" /></p>
189) 
190) <p>Click the "Install TorButton" shortcut if you do not have the Tor Button
191) plugin installed.</p>
192) 
193) <p><img src="img/torbutton01.png" alt="" /></p>
194) 
195) <p>Continue with installation despite warning about installing from local file.</p>
196) 
197) <p><img src="img/torbutton02.png" alt="" /></p>
198) 
199) <p>You will need to restart Firefox to use the new TorButton extension.</p>
200) 
201) <p><img src="img/torbutton03.png" alt="" /></p>
202) 
203) <p>Click on the TorButton status icon in the lower right to enable Tor.</p>
204) 
205) <p><img src="img/torbutton04.png" alt="" /></p>
206) 
207) <p>Verify that you are using Tor via
208) <a href="https://check.torproject.org/">https://check.torproject.org/</a></p>
209) 
210) <p><img src="img/torbutton05.png" alt="" /></p>
211) 
212) 
213) <hr />
214) <a id="ExperimentalUse"></a> 
215) <h2><a class="anchor" href="#ExperimentalUse">Experimental: Using Flash</a></h2>
216) 
217) <p><strong>IMPORTANT: Tor VM can protect your endpoint IP address when using
218) Flash and other software but it does not yet protect against attacks which
219) reduce your anonymity set.</strong> DO NOT use Tor VM in this manner if you
220) rely on unlinkable anonymity; wait until this is addressed in future releases.
221) </p>

222) 

223) <p>You should run Flash Player and other Internet software as a restricted user.
224) Switch to the restricted user account configured in <a class="anchor" href="#Setup">Step Two</a>.</p>
225) 
226) <p><img src="img/switch-user.png" alt="Switch to restricted user to play Flash content" /></p>
227) 
228) <p>First be sure that transparent proxy of Internet traffic through Tor is
229) working correctly. Tor VM ensures that all your traffic is anonymized
230) regardless of whether TorButton and Firefox are used or not.</p>
231) 
232) <p><img src="img/flash01.png" alt="" /></p>
233) 
234) <p>Connections made from the Browser and Flash Player plugin will now
235) be transparently proxied through the Tor network when viewing content.</p>
236) 
237) <p><img src="img/flash02.png" alt="" /></p>
238) 
239) <p>The transparent proxy redirection counts will indicate connections redirected
240) through Tor in this manner. Traffic sent via TorButton and Polipo are visible as
241) SOCKS connections to the Tor VM instance.</p>
242) 
243) <p><img src="img/transparent.png" alt="Transparent proxy traffic can be seen along with TorButton and Polipo traffic" /></p>
244) 
245) 
246) <hr />
247) <a id="Modify"></a>
248) <h2><a class="anchor" href="#Modify">Modify Tor VM Install Options</a></h2>
249) 
250) <p>Once a package is installed you can change the default installation options
251) via the "Change" option for the package. For example, Tor VM is configured to
252) run at start up which can be disabled by modifying the installation.</p>
253) 
254) <p><img src="img/change01.png" alt="" /></p>
255)  
256) <p>The Change package option will launch the installer GUI for the package.</p>
257) 
258) <p><img src="img/change02.png" alt="" /></p>
259)  
260) <p>The list of configurable installation options can now be set as desired.
261) For example, disabling the "Run at Startup" option as shown here.</p>
262) 
263) <p><img src="img/change03.png" alt="" /></p>
264)  
265) <p>Select "Next" once all changes have been selected.</p>
266) 
267) <p><img src="img/change04.png" alt="" /></p>
268)  
269) <p>Select "Change" to apply the changes to the installed software.</p>
270) 
271) <p><img src="img/change05.png" alt="" /></p>
272)  
273) <p>And finally "Finish" to exit the installer GUI. The requested changes
274) are now in effect.</p>
275) 
276) <p><img src="img/change06.png" alt="" /></p>
277)  
278) 
279) <hr />

280) <a id="Remove"></a>

281) <h2><a class="anchor" href="#Remove">Uninstall Tor Bundle Software</a></h2>

282) 
283) <p>A script to uninstall all of the Tor bundle applications at once is placed
284) on the desktop. Run this utility to remove all of the Tor packages and files.</p>
285) 
286) <p><img src="img/uninstall.png" alt="The Uninstall_Tor script will remove all Tor packages and files" /></p>
287) 

288) 
289) <hr />
290) <a id="Repair"></a>
291) <h2><a class="anchor" href="#Repair">Repair Installed Applications</a></h2>
292) 
293) <p>If any installed files become corrupted or deleted you can repair them
294) with the support option for the application package having problems.</p>
295) 
296) <p><img src="img/vidalia-support.png" alt="In Add or Remove Programs - Select support option for package" /></p>
297) 
298) <p>Choose the repair option and all of the package files and registry will be
299) restored.</p>
300) 
301) <p><img src="img/vidalia-repair.png" alt="Choose Repair option" /></p>
302) 
303) 
304) <hr />

305) <a id="Debug"></a>

306) <h2><a class="anchor" href="#Debug">Troubleshoot Problems and Report Bugs</a></h2>

307) 
308) <p>The Tor VM category in the Tor flyspray bug tracker is used to manage
309) defects and features. See the

310) <a href="http://bugs.noreply.org/flyspray/index.php?tasks=all&amp;project=4"
311) >Tor flyspray bug tracker</a> for known issues and pending changes.</p>

312) 

313) <!-- localized installers and full Marble data bundle?

314) <a id="Advanced"></a>

315) <h2><a class="anchor" href="#Advanced">Experimental Packages and Usage</a></h2>

316) -->
317) 

318) 
319) <hr />

320) <a id="More"></a>

321) <h2><a class="anchor" href="#More">Additional Resources</a></h2>

322) 
323) <p>The latest design document for Tor VM is available in revision control:

324) <a href="https://svn.torproject.org/svn/torvm/trunk/doc/design.html"
325) >https://svn.torproject.org/svn/torvm/trunk/doc/design.html</a>.

326) </p>
327) 
328) <p>Features and fixes planned for the Tor VM software are documented in the
329) <a href="https://svn.torproject.org/svn/torvm/trunk/TODO">Tor VM TODO</a>.</p>
330) 
331) <p><a href="https://data.peertech.org/torbld/info/Tor_VM-svn">Automated package
332) builds are available</a> for verifying fixes in subversion and testing work in
333) progress.</p>

334) 

335) <p>Be sure to build against a known working tag in the torvm repo. For
336) example,<br />

337) svn export https://svn.torproject.org/svn/torvm/tags/torvm-0_0_1 torvm-0.0.1-src

338) </p>
339)