Community Packages

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#37775 - dnscrypt-proxy.service should let users configure the provider

Attached to Project: Community Packages
Opened by Jerome Leclanche (Adys) - Friday, 15 November 2013, 13:33 GMT
Last edited by Felix Yan (felixonmars) - Monday, 18 November 2013, 07:31 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To Felix Yan (felixonmars)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

http://dnscrypt.org/

"DNSCrypt comes pre-configured for OpenDNS, although the --resolver-address=<ip>[:port], --provider-name=<certificate provider FQDN> and --provider-key=<provider public key> can be specified in order to change the default settings."

Currently, there's no way to configure those in /etc/conf.d/dnscrypt-proxy so it defaults to OpenDNS.

Additionally, should take a look at whether dnscrypt should use the User=nobody key in the service file itself, rather than using the --user switch. I didn't test though, it might need root to bind port 53 in the first place.
This task depends upon

Closed by  Felix Yan (felixonmars)
Monday, 18 November 2013, 07:31 GMT
Reason for closing:  Implemented
Additional comments about closing:  1.3.3-3
Comment by Felix Yan (felixonmars) - Monday, 18 November 2013, 00:35 GMT
Since systemd don't recommend us to use EnvironmentFile, it's recommended to change the resolver / provider settings by overriding the ExecStart line in a new conf file in /etc/systemd/system/dnscrypt-proxy.d/

I'll take a look at the --user switch, though.

Thanks for the heads up.
Comment by Jerome Leclanche (Adys) - Monday, 18 November 2013, 00:42 GMT
But an EnvironmentFile is already in use:

/etc/conf.d/dnscrypt-proxy:

DNSCRYPT_LOCALIP=127.0.0.1
DNSCRYPT_LOCALPORT=53
DNSCRYPT_USER=nobody

So I don't really understand what you mean.
Comment by Felix Yan (felixonmars) - Monday, 18 November 2013, 00:45 GMT
Hmm, okay, sorry for overlooking this.

Will implement.

Loading...