On Tue, 04 Jul 2017, iry wrote:

> Dear Peter:
> 
> Although it has not been settled down on torrc.d will be implemented in
> Debian tor package, if it is the way as Jigsaw52's pull request[0], then
> there will be a potential problem:
> 
> 1. According to Jigsaw52's pull request, %include /etc/torrc.d will be
> added to /usr/share/tor/tor-service-defaults-torrc

I don't think having torrc sourced in the defaults is a good approach.

> 2. torrc files generated by users/applications go to /etc/torrc.d

It's not clear that this is such a good idea anymore, but we should
support .d config somehow.

> Then if the user used an application to generate a torrc file with a
> proxy config, let's say. And after a while, the proxy setting is no
> longer needed/valid, there is no obvious way to find previous settings.
> As a normal user, he/she may examine /etc/tor/torrc, but there will be
> no proxy settings, which may cause a confusing and frustrating debugging
> process.
> 
> Therefore, Patrick proposed the following solution[1]:
> 
> >     At the very top (?) of /etc/tor/torrc as per Debian's default should 
> > explain the .d folder set up by Debian 
> > (/usr/share/tor/tor-service-defaults-torrc).
> > 
> >     /etc/tor/torrc as per Debian's default should discourage users 
> > modification of /etc/tor/torrc?
> > 
> >     And advice users to use /etc/torrc.d (or whatever folder(s) Debian will 
> > set up) since that won't throw dpkg interactive conflict resolution dialogs 
> > when /etc/tor/torrc gets modified by Debian?
> 
> Do you think it will be a good solution? I am looking forward to a
> further discussion since it is a really important feature for Debian and
> its derivatives.

I'm tempted to stop shipping upstream's torrc as /etc/tor/torrc.  It's
full of options that most users should never set, and shipping an almost
empty one is much nicer.

I suspect that approximately the only thing it ought to have is the
include line.

-- 
                            |  .''`.       ** Debian **
      Peter Palfrader       | : :' :      The  universal
 https://www.palfrader.org/ | `. `'      Operating System
                            |   `-    https://www.debian.org/

Reply via email to