FROM docker.io/library/alpine:3.22.7@sha256:2e0b81d60597f449baa56dc25d355367869d2dca4cd57e866f1e2b52af3eb55f
# Pins observed in the actual Alpine 3.22 amd64 package transaction, 2026-11-01.
# Pin the complete added dependency set; base packages are frozen by the digest.
RUN apk add --no-cache tor=0.4.9.15-r0 libcap2=2.78-r0 libevent=2.1.13-r0 \
    xz-libs=5.8.4-r0 libseccomp=2.6.1-r0 zstd-libs=1.5.7-r0 \
    && mkdir -p /tmp/lnd-tor && chown 100:100 /tmp/lnd-tor \
    && chmod 700 /tmp/lnd-tor
COPY torrc /etc/tor/torrc
USER 100:100
ENTRYPOINT ["tor", "-f", "/etc/tor/torrc"]