I noticed the Ubuntu+Tor thread was in support, so I figured I would add this here, too.
The previously mentioned thread was missing some key information, such as how to force connections to only onion addresses, how to listen over tor, how to make sure you fetch params via tor, etc.
To make things easier for everyone I created a docker image that does it all from the official repos. When started with the tor flag, it checks the connection first, then fires everything up.
Unlike the ridiculously old docker-hub images out there, this will automatically rebuild every month to ensure new copies of tor and zcashd are leveraged.
The image can be pulled from here: https://hub.docker.com/r/nowsci/zcashd/
Or if you would like to build it yourself: https://github.com/Fmstrat/zcashd