Entware Pi-hole directly on the router? Yes!

[bibikalka]

Turns out... I had a bug in my build script and it never properly deleted the binary from the previously built package, making it use the same binary for all packages...
Update the package and let me know if the issue is gone now.

Alright, no errors now! That was indeed the issue.

Going forward, the github page could be tweaked a bit, based on the learnings from this thread.

The process is running as the 'pihole' user since I added that yesterday, I guess that does not matter one way or another:

# ps wT |grep pihole
2038537 pihole   13244 S <  pihole-FTL -- -u pihole -g pihole
2038546 pihole   13244 S <  {database} pihole-FTL -- -u pihole -g pihole
2038547 pihole   13244 S <  {housekeeper} pihole-FTL -- -u pihole -g pihole
2038548 pihole   13244 S <  {dns-client} pihole-FTL -- -u pihole -g pihole
2038549 pihole   13244 S <  {timer} pihole-FTL -- -u pihole -g pihole
2038550 pihole   13244 S N  {civetweb-timer} pihole-FTL -- -u pihole -g pihole
2038551 pihole   13244 S N  {civetweb-master} pihole-FTL -- -u pihole -g pihole
2041886 pihole   13244 S N  {civetweb-worker} pihole-FTL -- -u pihole -g pihole
2041887 pihole   13244 S N  {civetweb-worker} pihole-FTL -- -u pihole -g pihole
2041888 pihole   13244 S N  {civetweb-worker} pihole-FTL -- -u pihole -g pihole
2041889 pihole   13244 S N  {civetweb-worker} pihole-FTL -- -u pihole -g pihole
2051731 admin     5980 S    grep pihole

A small software engineering tweak. Could you change the compile flags to strip the debug symbols, and perhaps also to use dynamic libraries as well? Sort of how the official entware binaries look, see nmap:

admin@RT-AC86U-9988:/tmp/mnt/ac86u/entware/bin# file nmap
nmap: ELF 64-bit LSB executable, ARM aarch64, version 1 (GNU/Linux), dynamically linked, interpreter /opt/lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, stripped
admin@RT-AC86U-9988:/tmp/mnt/ac86u/entware/bin# file pihole-FTL
pihole-FTL: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, BuildID[sha1]=51bccd9df92de8a090037b8a93a08237a6ac2a52, with debug_info, not stripped

 

[jacklul]

Going forward, the github page could be tweaked a bit, based on the learnings from this thread.

Added suggestion to add 'pihole' user.
See updated README, what else would you add here? Device/firmware specific stuff should go into wiki though.

The process is running as the 'pihole' user since I added that yesterday, I guess that does not matter one way or another:

It should basically run as any user, it will log a few errors (chown_pihole() function) about not finding 'pihole' user but as far as I can tell that doesn't impact anything.

A small software engineering tweak. Could you change the compile flags to strip the debug symbols, and perhaps also to use dynamic libraries as well?

Pretty sure Pi-hole developers made it static for a reason - to use library versions they know that work, forcing it to use older libraries might break the build. No idea why they are not stripping it though but there might be a reason too.
Forcing it to use dynamic libraries means I would have to build toolchains and a lot of libraries from the Entware repo almost each time I want to build my binary, that would increase build time from ~5 minutes to maybe an hour.
I'm using their Docker builder images for building to make sure everything is assembled as it should.