DNScrypt dnscrypt installer for asuswrt

[SomeWhereOverTheRainBow]

So far I have been running great with changes please any one with issues feel free to report them so they may be corrected.

 

[Zastoff]

How to:
Install DNSCrypt-proxy and how to set it up with NextDNS/Controld (DNS over HTTPS) with your personal account.
DNSCrypt installer in amtm and di

Spoiler: How to

Info: Detected RT-AX88U router.
Info: Detected Linux platform.
Info: Detected ARMv8 architecture.
Info: JFFS custom scripts and configs are already enabled.
Info: DNS Environment is Ready.
Info: DI_VERSION=v2.4.4
Info: DNSCRYPT_VER=2.1.1
Info: Manager file is Up-To-Date!
Info: Choose what you want to do:
1) Install/Update dnscrypt-proxy
2) Uninstall dnscrypt-proxy
3) Configure dnscrypt-proxy
4) Set timezone
5) Unset timezone
6) Install (P)RNG
7) Uninstall (P)RNG
8) Install swap file
9) Uninstall ALL
b) Backup
q) Quit
=> Please enter the number that designates your selection:, [1-9/b/q]: 1
Info: This operation will install dnscrypt-proxy and related files (<6MB)
Info: to jffs, no other data will be changed.
Info: Also some start scripts will be installed/modified as required.
=> Do you want to install dnscrypt-proxy to /jffs? [y/n]: y
...
Info: Checking dnscrypt-proxy configuration...
[2022-05-23 16:52:58] [NOTICE] dnscrypt-proxy 2.1.1
[2022-05-23 16:52:58] [NOTICE] Dropping privileges
[2022-05-23 16:52:58] [NOTICE] Source [relays] loaded
[2022-05-23 16:52:58] [NOTICE] Source [odoh-servers] loaded
[2022-05-23 16:52:58] [NOTICE] Source [odoh-relays] loaded
[2022-05-23 16:52:58] [NOTICE] Source [public-resolvers] loaded
[2022-05-23 16:52:58] [NOTICE] Configuration successfully checked
=> Do you want to redirect all DNS resolutions on your network through to Dnscrypt-Proxy? [y/n]: y
Info: You can choose to keep any custom dnsfilter values by only redirect non-custom traffic or send all traffic through to Dnscrypt-Proxy.
=> Do you want to redirect only NON-CUSTOM DNS resolutions on your network through to Dnscrypt-Proxy? [y/n]: y (if you have any devices set in LAN/DNS-Filter)
Info: DNSFilter is set to control DNS through to Dnscrypt-Proxy, while leaving any Custom Rules and Values.
Info: Choose DNS resolving load balancing strategy:
1) p2 (default)
2) ph
3) first
4) random
=> Select your strategy, [1-4]: 1
=> Do you want to use load balance estimator to adjust resolvers based on latency calculations? [y/n]: y
Info: Choose how your DNS servers are selected:
1) Automatically (default)
2) Manually
3) Static
=> Select your mode, [1-3]: 3
(NextDNS Account visit https://my.nextdns.io/login enter your setup and copy your DNS STAMP can be found on setup tabs Linux or Router. For Controld use
This guide

Generate DNS Stamp

How to generate a DoH or DoT DNS stamps to use with Dnscrypt

kb.controld.com

)
=> Please choose Static Server Name: NextDNS-Custom or Controld-Custom
=> Please enter Static Server SDNS stamp: sdns://AgEAAAAAAAAAAAA..
=> Is NextDNS-Custom-Static a DNSCrypt Server? [y/n]: n
=> Is NextDNS-Custom-Static an Oblivious DNS-over-HTTPS Server? [y/n]: n
=> Do you want to set up another Static Server? [y/n]: n
Info: finished static setup.
Info: Evaluating the possibilities for other dnscrypt-proxy configurations such as relay support...
Info: Continue without Relays Support
Info: Set the DNS server(s) for initializing dnscrypt-proxy
Info: and router services (e.g. ntp) at boot
=> Default is 9.9.9.9: (Enter preferred DNS ip Or press enter to keep the default)
=> 2nd Default is 8.8.8.8: 1.1.1.1 (Or press enter to keep the default)
Info: Checking dnscrypt-proxy configuration...
[2022-05-23 16:53:09] [NOTICE] dnscrypt-proxy 2.1.1
[2022-05-23 16:53:09] [NOTICE] Dropping privileges
[2022-05-23 16:53:09] [NOTICE] Source [public-resolvers] loaded
[2022-05-23 16:53:09] [NOTICE] Source [relays] loaded
[2022-05-23 16:53:09] [NOTICE] Source [odoh-servers] loaded
[2022-05-23 16:53:09] [NOTICE] Source [odoh-relays] loaded
[2022-05-23 16:53:09] [NOTICE] Configuration successfully checked
Info: Starting dnscrypt-proxy...
Back at menu:
Recommend option 4 setup TimeZone
From router syslog:
###########################################
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: dnscrypt-proxy 2.1.1
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: Network connectivity detected
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: Dropping privileges
May 23 16:53:10 RT-AX88U manager[932]: start_dnscrypt_proxy took 0 second(s) to complete.
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: Network connectivity detected
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: Now listening to 127.0.1.1:53 [UDP]
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: Now listening to 127.0.1.1:53 [TCP]
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: Source [public-resolvers] loaded
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: Source [relays] loaded
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: Source [odoh-servers] loaded
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: Source [odoh-relays] loaded
May 23 16:53:10 RT-AX88U dnscrypt-proxy[15405]: Firefox workaround initialized
May 23 16:53:11 RT-AX88U dnscrypt-proxy[15405]: [NextDNS-Custom-Static] OK (DoH) - rtt: 21ms
May 23 16:53:11 RT-AX88U dnscrypt-proxy[15405]: Server with the lowest initial latency: NextDNS-Custom-Static (rtt: 21ms)
May 23 16:53:11 RT-AX88U dnscrypt-proxy[15405]: dnscrypt-proxy is ready - live servers: 1
###########################################
Enjoy and please check nextdns account page to see that you are connected to your account.

●All good!
This device is using NextDNS with this configuration.

The personal sdns stamp can now again be found on NextDNS setup page under setup guides (linux/router)
If SDNS Stamp on NextDNS setup page is missing you can look at this post
This guide should also help for users that want Controld services.

 

[SomeWhereOverTheRainBow]

*Update DI_Version=v2.0.6*

• Repairs to Timezone/Enhancement to Time-save functionality
• Eliminate the need for Wan-start

 

[dugaduga]

@SomeWhereOverTheRainBow An option to restart dnscrypt in the installer menu would be very helpful

 

[SomeWhereOverTheRainBow]

@thelonelycoder An option to restart dnscrypt in the installer menu would be very helpful

Thelonelycoder does not code the installer. You can restart dnscrypt proxy by running /jffs/dnscrypt/manager dnscrypt-start
From within ssh terminal.

 

[SomeWhereOverTheRainBow]

@SomeWhereOverTheRainBow An option to restart dnscrypt in the installer menu would be very helpful

I can see how it.can be helpful but I think it is outside the scope of what the installer was intended to do at this moment ( meaning the design of it was only made for update/install/ configure/ or removal.) It is a good idea for a future possibility though.

 

[SomeWhereOverTheRainBow]

*Update DI_Version=v2.0.8*

• Enhanced Update function now detects minor changes.
  
• Added support for defining Multiple Static Servers (as oppose to only single) thanks @Zastoff for contributions

 

[HiTekRedneck]

*Update DI_Version=v2.0.8*

• Enhanced Update function now detects minor changes.
  
• Added support for defining Multiple Static Servers (as oppose to only single) thanks @Zastoff for contributions

I tried to update my Asus RT-AC68U this morning. AMTM and Diversion and Entware all appeared to update fine.

When I tried to update dnscrypt I started having errors.

There was a message about a script error in line 1335 ( I only got a glance at it) in the installer. Now when I run AMTM all looks fine, but checking for script updates I get a lines for dnscrypt that read:

di open dnscrypt ins. v2.0.8
dnscrypt-pro. v"$(curl -sL "$LATEST_URL" | grep "tag_name" | head -1 | cut -d \" -f 4)" -> v2.0.39

I have tried rerunning the installer and deleting the whole install and reinstalling, with all the necessary reboots.

Any ideas?

Can't send your .tar file - file type not allowed. Tried appending .txt to filename - file too large (8.62MB)...
Router: Asus RT-AC68U running AsusWRT-Merlin 384.14_2
DNS servers selected 45-cloudflare and 131 - google

Thanks in advance and for all the other great work to date.

Randall

 

[Zastoff]

I tried to update my Asus RT-AC68U this morning. AMTM and Diversion and Entware all appeared to update fine.

When I tried to update dnscrypt I started having errors.

There was a message about a script error in line 1335 ( I only got a glance at it) in the installer. Now when I run AMTM all looks fine, but checking for script updates I get a lines for dnscrypt that read:

di open dnscrypt ins. v2.0.8
dnscrypt-pro. v"$(curl -sL "$LATEST_URL" | grep "tag_name" | head -1 | cut -d \" -f 4)" -> v2.0.39

I have tried rerunning the installer and deleting the whole install and reinstalling, with all the necessary reboots.

Any ideas?

Can't send your .tar file - file type not allowed. Tried appending .txt to filename - file too large (8.62MB)...
Router: Asus RT-AC68U running AsusWRT-Merlin 384.14_2
DNS servers selected 45-cloudflare and 131 - google

Thanks in advance and for all the other great work to date.

Randall

I think it will be fixed in the next amtm update (i get the same "$(curl -sL "$LATEST_URL" | grep "tag_name" | head -1 | cut -d \" -f 4)" -> v2.0.39)
But di in amtm opens installer menu correct and works for me
Same for you?
DNSCrypt installer now checks and handle updates if one is available and can be updated with option 1 install/update in menu

 

[HiTekRedneck]

I think it will be fixed in the next amtm update (i get the same "$(curl -sL "$LATEST_URL" | grep "tag_name" | head -1 | cut -d \" -f 4)" -> v2.0.39)
But di in amtm opens installer menu correct and works for me
Same for you?
DNSCrypt installer now checks and handle updates if one is available and can be updated with option 1 install/update in menu

Thanks for the info. It all appeasr to be working but that installer error made me wonder...

 

[Zastoff]

Thanks for the info. It all appeasr to be working but that installer error made me wonder...

Ok good
It will be fixed soon hopefully

 

[dave14305]

Ok good
It will be fixed soon hopefully

It was broken in this commit when the version number (DNSCRYPT_VER) was changed from a fixed version to a curl command.
https://github.com/thuantran/dnscry...mmit/3cbb3132c791a0732a61330b35078e9caccb32ed

 

[SomeWhereOverTheRainBow]

It was broken in this commit when the version number (DNSCRYPT_VER) was changed from a fixed version to a curl command.
https://github.com/thuantran/dnscry...mmit/3cbb3132c791a0732a61330b35078e9caccb32ed

Yes as the installer no longer requires a fixed dnscrypt version it is now setup to always install newest version, the installer now has a version.

 

[Sarkell100]

Hi, is it possible to update installer to use latest timezone data, preferably from the IANA source:
ftp://ftp.iana.org/tz/tzdata-latest.tar.gz

 

[SomeWhereOverTheRainBow]

Hi, is it possible to update installer to use latest timezone data, preferably from the IANA source:
ftp://ftp.iana.org/tz/tzdata-latest.tar.gz

the one we have is the latest that I have access to that is in the appropriate format, the one you just provided is not in an appropriate format that can be used sorry as it does not have individual timezone files per regional requirements.
this is the contents of the one you provided:

this is only some of the zone info the one we use now includes:

the one you provided is incomplete.

 

[SomeWhereOverTheRainBow]

Hi, is it possible to update installer to use latest timezone data, preferably from the IANA source:
ftp://ftp.iana.org/tz/tzdata-latest.tar.gz

http://mirrors.sonic.net/archlinux/core/os/x86_64/tzdata-2019c-3-x86_64.pkg.tar.xz
this one maybe the required newest one i am a bit skeptical to use it though as it is listed x86_64 vs. the any tzdata-2018c-1-any.pkg.tar.bz2 ours is listed as

 

[SomeWhereOverTheRainBow]

*Update DI_Version=v2.0.9*

• Fixed/Patched installer/update issues. thanks @thelonelycoder for providing timely valuable user feedback.

 

[joe scian]

After upgrading firmware to latest release , diversion and amtm to latest release when entering U from amtm
Code:
usr/sbin/amtm: line 80: /jffs/dnscrypt/dnscrypt-proxy: not found
di open dnscrypt inst v2.0.9 -> min upd
dnscrypt-prox upd err
ep manage Entware packages no upd
m menu amtm uu force update v3.1.1
_____________________________________________
Script update(s) available!
_____________________________________________

 

[SomeWhereOverTheRainBow]

After upgrading firmware to latest release , diversion and amtm to latest release when entering U from amtm
Code:
usr/sbin/amtm: line 80: /jffs/dnscrypt/dnscrypt-proxy: not found
di open dnscrypt inst v2.0.9 -> min upd
dnscrypt-prox upd err
ep manage Entware packages no upd
m menu amtm uu force update v3.1.1
_____________________________________________
Script update(s) available!
_____________________________________________

it is working for me. run /jffs/dnscrypt/installer in the ssh terminal and hit option 1 for me and try again.

 

[SomeWhereOverTheRainBow]

*DI_Version=v2.0.10*

• Enhance Update detection/ Enhance Update/install process ---fixed a lot of bugs as well- special thanks @thelonelycoder for his help/support of our endeavors.