mapi68 / dnscrypt-proxy-pihole

Preconfigured deb package for every Raspberry Pi and Pi-hole to use only best DNSCrypt, DNS-over-HTTPS and No-Log servers

dnscrypt-proxy-pihole

• Overview
• Install
• Uninstall
• Configuration
• Check

Overview

Preconfigured deb package for every Raspberry Pi and Pi-hole, optimized for and , only for armhf (32bit). Elevate your experience with top-tier DNSCrypt, DNS-over-HTTPS, and No-Log servers, all seamlessly integrated for your security.

Install

curl -sSfL https://raw.githubusercontent.com/mapi68/dnscrypt-proxy-pihole/master/dnscrypt-proxy-pihole-install | bash

Uninstall

sudo apt --purge remove dnscrypt-proxy-pihole -y

Configuration

Check

Check if dnscrypt-proxy-pihole works and resolves DNS names:

tail -f /var/log/dnscrypt-proxy/query.log

Check server with the lowest initial latency:

journalctl -f -u dnscrypt-proxy

Browsing Experience Security Check

dnscrypt-proxy-pihole's Issues

"Could not open lock file"

Setup: dnscrypt-proxy-pihole_2.0.44; Pi-hole v5.1.2; RPi 4B, 4GB. I am also running log2ram

On executing this:

sudo dpkg -i dnscrypt-proxy-pihole_2.0.44_armhf.deb; apt install -f -y

I am getting this:

(Reading database ... 118347 files and directories currently installed.)
Preparing to unpack dnscrypt-proxy-pihole_2.0.44_armhf.deb ...
Unpacking dnscrypt-proxy-pihole (2.0.44) over (2.0.44) ...
Setting up dnscrypt-proxy-pihole (2.0.44) ...
adduser: Only one or two names allowed.
dpkg: error processing package dnscrypt-proxy-pihole (--install):
installed dnscrypt-proxy-pihole package post-installation script subprocess returned error exit status 1
Errors were encountered while processing:
dnscrypt-proxy-pihole
E: Could not open lock file /var/lib/dpkg/lock-frontend - open (13: Permission denied)
E: Unable to acquire the dpkg frontend lock (/var/lib/dpkg/lock-frontend), are you root?

Not sure if it is a bug or how to proceed.

EDIT: I posted an updated, more detailed version of this here.

Cloudflare tests fail when Wireguard is enabled

My PiHole + dnscrypt-proxy-pihole setup works fine. When I enable Wireguard on a client device to connect to PiVPN, PiHole still does its job but I don't pass the first two tests (Secure DNS and DNSSEC) on https://www.cloudflare.com/ssl/encrypted-sni/ any more. This issue disappears when I disable Wireguard, ie when the connection is local again. I expected connections via VPN to be treated as local too. Could dnscrypt-proxy-pihole have something to do with this?

New version fails to start - Bullseye

Hi,

Just updated with git clone and installed the latest deb but it refuses to start with Bullseye running on a Pi Zero 2 W. The error message shown in systemctl status is,

Apr 17 20:50:25 pihole systemd[1]: Started DNSCrypt client proxy.
Apr 17 20:50:25 pihole dnscrypt-proxy[10342]: /usr/sbin/dnscrypt-proxy: /lib/arm-linux-gnueabihf/libc.so.6: version 'GLIBC_2.34' not found (required by /usr/sbin/dnscrypt-proxy)
Apr 17 20:50:25 pihole dnscrypt-proxy[10342]: /usr/sbin/dnscrypt-proxy: /lib/arm-linux-gnueabihf/libc.so.6: version 'GLIBC_2.32' not found (required by /usr/sbin/dnscrypt-proxy)
Apr 17 20:50:25 pihole systemd[1]: dnscrypt-proxy.service: Main process exited, code=exited, status=1/FAILURE
Apr 17 20:50:25 pihole systemd[1]: dnscrypt-proxy.service: Failed with result 'exit-code'.

Reverted back to previous version and it's working fine. I will update at some point to bookworm but didn't know if you've depreciated bullseye support or not ... the main page suggests you haven't. I think bullseye glibc6 is only 2.31 according to the output from dpkg -s libc6.

Thanks,

Jim

Can't resolve DNS

Hi,

I tried using this script on my Umbrel + Pihole setup, I wasn't able to resolve any addresses and the examples listed I followed exactly.

Thank you for including the uninstall script, so that I'm able to post this now!

If you would like me to troubleshot it I will. I wouldn't know where to start though.

Cheers

Setting up a specific DNS server

Once installed, how can I configure dnscrypt to use a specific DNS server? I can see that the dnscrypt-proxy.toml file includes several lists of servers, but I would like to use only one of them.