torsocks VS tini

Start by downloading and installing the Tor browser from the official website (https://www.torproject.org/). This browser allows you to access the dark web and interact with onion services.

Don't these Tor Browser[0]: the Tor Project version of Firefox. It aims to make all users look the same, making it difficult for you to be fingerprinted based on your browser and device information.

A Mullvad Browser[1]: a browser developed in collaboration between Mullvad VPN and the Tor Project, which is meant to be used with a VPN instead of the Tor network.

[0]: https://www.torproject.org/

See https://www.torproject.org/ (Tor website)

How to setup I2P | How to setup Tor

yes busybox httpd or civetweb is even smaller, both around 300kb.

for tini you mean https://github.com/krallin/tini? how large is your final docker image, why not just alpine in that case which is musl+busybox

Tini, a useful process manager for containerized apps

Ah gotcha. I believe it can be baked into images as well, per the entrypoint example in the readme: https://github.com/krallin/tini

Not sure how this will fare IRL in k8s as I haven’t much experience there. It’s still silly that this is the default behavior where you need something like Tini, but I digress.

To be fair, even for running a single process the pitfalls are real. I've been seeing Tini[1] a lot for these situations.

I just read in the README that Tini is included by Docker since 1.13 if using --init flag.

[1] https://github.com/krallin/tini

The default init process used is the first docker-init executable found in the system path of the Docker daemon process. This docker-init binary, included in the default installation, is backed by tini.

AFAIK It's for the init process to reparent zombie processes. See TINI

The second easiest (and most common when your entry point is a bash script) is to use a fake init tool like tini