Skip to content

v1.4.1 — Minimal Alpine Linux Base Image & 48% Size Reduction

Choose a tag to compare

View all tags
@MustermenschAlex MustermenschAlex released this 23 Oct 12:01
· 8 commits to main since this release
v1.4.1
14dba6b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release Highlights

This release migrates the container runtime from debian:bookworm-slim to alpine:3.21, reducing image footprint by nearly 50% while preserving 100% backward compatibility and zero CVE vulnerabilities.

⚡ Performance & Size Optimization

  • Minimal Base Image: Migrated to alpine:3.21 pinned cryptographically by SHA256 digest.
  • Uncompressed Size: Reduced from 184.0 MB down to 94.3 MB (-48.8%).
  • Compressed Download: Reduced from ~52 MB down to ~29 MB (-46.1%).
  • Direct GeoIP Bundling: Uses Alpine's integrated Tor GeoIP databases without requiring heavyweight external packaging.

🛡️ Security & Hardening

  • Vulnerabilities: Trivy container scan reports 0 Vulnerabilities (0 High, 0 Critical).
  • Supply Chain Security: Maintained multi-architecture builds (linux/amd64, linux/arm64, linux/arm/v7) with SLSA provenance and SBOM attestations.
  • Least Privilege: Non-root system user (torproxy), fail-closed Privoxy proxy routing, and dropped Linux capabilities remain fully enforced.

🔄 Compatibility Contract

  • 100% backward compatible drop-in replacement.
  • Unchanged port listeners (8118, 9050, 8080), environment variables (TORPROXY_*), and REST control API endpoints.
Assets 2
Loading