bug#35728: Tor & IceCat's TorButton shows it's connected but doesn't route the traffic

[sirmacik <sirmacik@wioo.waw.pl>]

[-- Attachment #1: Type: text/plain, Size: 865 bytes --]

swedebugia dixit (2019-05-14, 17:01):

> On 2019-05-14 15:19, sirmacik wrote:
> > Hey Guix!
> >
> > There seems to be a problem with Tor and TorButton in GNU IceCat's
> > package. Torsocks works for other apps, TorButton shows notification
> > that it's connected to the Tor server but when I go to
> > check.torproject.org I'm not routed through tor.
> >
> > This problem doesn't appear in Archlinux or GNU/Debian so it seems
> > that bug is Guix related.
>
> Could you please post the output of "guix describe" and your config.scm?

here is guix describe output:

$ guix describe
Generation 14   maj 14 2019 15:28:04    (current)
  guix 1731b29
    repository URL: https://git.savannah.gnu.org/git/guix.git
    branch: master
    commit: 1731b29742bb2abb24fb0000ea00b3f35b5133bc

You can find config attached to this message.

--
sirmacik
PGP: 0xE0DC81D523891771

[-- Attachment #2: config.scm --]
[-- Type: text/plain, Size: 5428 bytes --]

;; This is an operating system configuration template
;; for a "desktop" setup with GNOME and Xfce where the
;; root partition is encrypted with LUKS.

(use-modules (gnu) (gnu packages)
             (gnu packages cups)
             (gnu packages audio)
             (gnu packages xorg)
             (gnu services pm)
             (gnu services sound)
             (gnu services networking)
             (gnu system nss))
(use-service-modules desktop xorg ssh avahi mcron nfs cups)
(use-package-modules certs gnome)

(operating-system
 (host-name "*****")
 (timezone "Europe/Warsaw")
 (locale "pl_PL.utf8")

 (keyboard-layout (keyboard-layout "pl"))

 ;; Use the UEFI variant of GRUB with the EFI System
 ;; Partition mounted on /boot/efi.
 (bootloader (bootloader-configuration
              (bootloader grub-efi-bootloader)
              (target "/boot/efi")))

 ;; Specify a mapped device for the encrypted root partition.
 ;; The UUID is that returned by 'cryptsetup luksUUID'.
 (mapped-devices
  (list (mapped-device
         (source (uuid "f45c2a51d-fc66-4033-8d15-e87016ab5542"))
         (target "my-root")
         (type luks-device-mapping))))

 (swap-devices '("/swapfile"))

 (file-systems (append
                (list (file-system
                       (device (file-system-label "my-root"))
                       (mount-point "/")
                       (type "ext4")
                       (dependencies mapped-devices))
                      (file-system
                       (device (uuid "8646-7E06" 'fat))
                       (mount-point "/boot/efi")
                       (type "vfat")))
                %base-file-systems))

 (users (cons (user-account
               (name "user")
               (comment "user")
               (group "users")
               (home-directory "/home/user")
               (supplementary-groups '("wheel" "netdev"
                                       "audio" "video"
                                       "lp" "input"
                                       "kvm" "lpadmin"
                                       "users" "avahi")))
              %base-user-accounts))

 ;; This is where we specify system-wide packages.
 (packages (append (map specification->package
                        '("nss-certs" "gvfs" "dosfstools" "nfs-utils" "xclip" "xterm"
                          "xbacklight" "xprop" "gs-fonts" "pulseaudio" "pavucontrol"
                          "acpi" "tor" "torsocks" "emacs" "htop" "avahi" "zip" "unzip"
                          "tmux" "gnupg" "screen" "mutt" "offlineimap" "msmtp" "wget"
                          "file" "openssh" "lvm2" "icecat" "cryptsetup" "mosh" "iptables"
                          "openvpn" "network-manager-openvpn" "git" "bash-completion"
                          "seahorse" "gnome-tweaks" "rtorrent" "libreoffice"
                          "keepassxc" "password-store" "syncthing" "inkscape" "gimp"
                          "aspell" "hunspell" "rsync" "perl" "dconf-editor" "cups"
                          "ghc-pandoc" "texlive" "ghostscript-with-cups" "psutils"
                          "recutils" "gptfdisk" "font-gnu-freefont-ttf" "font-liberation"
                          "font-terminus" "font-ubuntu" "font-dejavu" "font-open-dyslexic"
                          "font-inconsolata" "font-comic-neue" "font-anonymous-pro"
                          "freetype" "font-lato" "tlp" "smartmontools" "thinkfan"
                          "ntp" "font-liberation"))
                   %base-packages))

 (services (append (list (service gnome-desktop-service-type)
                         (service cups-service-type
                                  (cups-configuration
			           (web-interface? #t)
		    	           (browsing? #t)
		                   (default-paper-size "A4")
			           (extensions
                                    (list cups-filters cups-pk-helper foomatic-filters hplip-minimal))))
                         (service mcron-service-type)
                         (service tor-service-type)
                         (service tlp-service-type
                                  (tlp-configuration
                                   (cpu-boost-on-ac? #t)))
                         (set-xorg-configuration
                          (xorg-configuration
                           (keyboard-layout keyboard-layout)
                           (modules (filter (lambda (mod)
                                              (not (eq? mod xf86-input-synaptics)))
                                            %default-xorg-modules)))))
                         (modify-services %desktop-services
                                          (alsa-service-type config =>
                                                             (alsa-configuration
                                                              (inherit config)
                                                              (pulseaudio? #t)))
                                          (bluetooth-service-type config =>
                                                                  (bluetooth-configuration
                                                                   (inherit config)
                                                                   (auto-enable? #t))))

                         ))

           ;; Allow resolution of '.local' host names with mDNS.
           (name-service-switch %mdns-host-lookup-nss))