I managed to install tor and browse using tor on my Librem 5. Here’s a short description how to accomplish that:
sudo apt install tor # Install the tor package, the torbrower-launcher is not yet available
sudo vim /etc/tor/torrc # Change the tor config file
Uncomment SocksPort 9050 in torrc
Uncomment RunAsDaemon 1 in torrc
Save torrc file
service tor start # start the tor service
service --status-all # check that the tor service is started, a ‘+’ appears before the service
Open ‘Scale Screen’ in the librem5-goodies package. This is needed since firefox doesn’t handle the settings screen correctly on Librem 5 yet. The port and Ok (to save) button will be inaccessible outside the screen even in landscape mode. Scale to 1.5.
Open the browser, I use firefox-esr
Open the Network Settings (search for proxy in settings)
You should use tor browser package!
Following steps above would still leak your DNS and other metrics. You can test for this at https://www.dnsleaktest.com/ https://whoer.net/
If you really have to use Firefox, at least add this to your torrc:
DNSPort 0.0.0.0:53
Then point here your DNS request via settings under Network Setting > Advanced Settings > IPv4 > IPv4 Method > Manual.
You can check your default DNS server with command:
nmcli device show wlan0
But you should really use TBB package at all times if you want real anonymity.
Thanks for pointing out the leaks! I started by trying to install the tor browser package, but it wasn’t available in the default repo for Librem 5 yet, https://wiki.debian.org/TorBrowser. Maybe I should just add the backports repo and try installing it from there.
https://check.torproject.org/ checks your user-agent string and if it’s not TBB it does displays orange warning message.
In case I was clear, when changing DNS, do not point it to 0.0.0.0:53 ,but 127.0.0.1:53
Also if using firefox try to avoid allowing javascript to run.
In FF about:config set javascript.enabled to FALSE.
Or use plugin like noscript
If you have to use javascript disable UDP stun - this also bypasses proxy setting:
media.peerconnection.enabled = FALSE
I know where I was wrong. Since you are using FF-ESR, same broweser TBB is based on, your user-agent is identical to TBB user agent. This orange message does only appear if using diferent browser. This is what it looks like:
