Community Packages

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#52286 - [dnscrypt-proxy] Failure to start service after the update

Attached to Project: Community Packages
Opened by PunkiD (PunkiD) - Wednesday, 28 December 2016, 01:37 GMT
Last edited by Felix Yan (felixonmars) - Friday, 30 December 2016, 03:44 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To No-one
Architecture x86_64
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No

Details

Description:
dnscrypt-proxy does not start after the package update to version 1.8.1-1, missing .fa files

Additional info:
* package version(s)

community/dnscrypt-proxy 1.8.1-1

* config and/or log files etc.

###dnscrypt-proxy.conf

######################################################
# #
# Sample configuration file for dnscrypt-proxy #
# #
######################################################


############## Resolver settings ##############

## [CHANGE THIS] Short name of the resolver to use
## Usually the only thing you need to change in this configuratio file.
## This corresponds to the first column in the dnscrypt-resolvers.csv file.

ResolverName dnscrypt.eu-dk


## Full path to the list of available DNSCrypt resolvers (dnscrypt-resolvers.csv)
## An up-to-date list is available here:
## https://download.dnscrypt.org/dnscrypt-proxy/dnscrypt-resolvers.csv
## and the dnscrypt-update-resolvers.sh script can be used in order to
## automatically download and verify updates.

ResolversList /usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv


## Manual settings, only for a custom resolver not present in the CSV file

# ProviderName dnscrypt.resolver.example
# ProviderKey E801:B84E:A606:BFB0:BAC0:CE43:445B:B15E:BA64:B02F:A3C4:AA31:AE10:636A:0790:324D
# ResolverAddress 203.0.113.1



############## Process options ##############

## Run the proxy as a background process

Daemonize no


## Write the PID number to a file

# PidFile /var/run/dnscrypt-proxy.pid


## [WINDOWS ONLY] The service name
## Multiple instances can run simultaneously, provided that they use
## distinct keys. The default service name is "dnscrypt-proxy".

# ServiceName dnscrypt-proxy


## [NOT AVAILABLE ON WINDWOS] Start the process, bind the required ports, and
## run the server as a less-privileged system user.
## The value for this parameter is a user name.

User dnscrypt



############## Network/protocol settings ##############

## Local address and port to listen to.
## A 127.0.0.x address is recommended for local use, but 0.0.0.0 or
## a specific interface address can be used on a router, or to
## configure a single machine to act as a DNS proxy for different
## devices.

LocalAddress 127.0.0.2:53


## Creates a new key pair for every query.
## This prevents logging servers from correlating client public keys with
## IP addresses. However, this option implies extra CPU load, and is not
## very useful with trusted/non-logging servers.

EphemeralKeys off


## Maximum number of active requests waiting for a response.
## Keep it reasonable relative to the expected number of clients.

# MaxActiveRequests 250


## This is the maximum payload size allowed when using the UDP protocol.
## The default is safe, and rarely needs to be changed.

# EDNSPayloadSize 1252


## Ignore the time stamps when checking the certificates
## Do not enable this option ever, unless you know that you need it.

# IgnoreTimestamps no


## Do not send queries using UDP. Only use TCP.
## Even if some resolvers mitigate this, DNS over TCP is almost always slower
## than UDP and doesn't offer additional security.
## Only enable this option if UDP doesn't work on your network.

# TCPOnly no



############## Logging ##############

## Log the received DNS queries to a file, so you can watch in real-time what
## is happening on the network.
## The value for this parameter is a full path to the log file.

# QueryLogFile /tmp/dns-queries.log


## Log file to write server errors and information to.
## If you use this tool for privacy, keeping logs of any kind is usually not
## a good idea.

# LogFile /var/log/dnscrypt-proxy.log


## Don't log events with priority above this log level after the service has
## been started up. Default is 6.
## Valid values are between 0 (critical) to 7 (debug-level messages).

# LogLevel 6


## [NOT AVAILABLE ON WINDOWS] Send server logs to the syslog daemon
## Log entries can optionally be prefixed with a string.

# Syslog off
# SyslogPrefix dnscrypt



############## Local filtering ##############

## If your network doesn't support IPv6, chances are that your
## applications are still constantly trying to resolve IPv6 addresses,
## causing unnecessary slowdowns.
## This causes the proxy to immediately reply to IPv6 requests,
## without having to send a useless request to upstream resolvers, and
## having to wait for a response.

BlockIPv6 yes


## Want to filter ads, malware, sensitive or inapropriate web sites and
## domain names? This feature can block lists of IP addresses and names
## matching a list of patterns. The list of rules remains private, and
## the filtering process directly happens on your own network. In order
## to filter IP addresses, the list of IPs has to be put into a text
## file, with one IP address per line. Lists of domain names can also be
## blocked as well. Put the list into a text file, one domain per line.
## Domains can include wildcards (*) in order to match patterns. For
## example *sex* will match any name that contains the sex substring, and
## ads.* will match anything starting with ads. The Internet has plenty
## of free feeds of IP addresses and domain names used for malware,
## phishing and spam that you can use with this feature.
##
## To enable, uncomment one of the following definitions:

## Block query names matching the rules stored in that file:
# BlackList domains:/etc/dnscrypt-blacklist-domains.txt

## Block responses whose IP addresses match IPs stored in that file:
# BlackList ips:/etc/dnscrypt-blacklist-ips.txt

## Block both domain names and IP addresses:
# BlackList domains:/etc/dnscrypt-blacklist-domains.txt ips:/etc/dnscrypt-blacklist-ips.txt

## Same as the above + log the blocked queries in a file.
# BlackList domains:/etc/dnscrypt-blacklist-domains.txt logfile:/var/log/dnscrypt-blocked.log
# BlackList ips:/etc/dnscrypt-blacklist-ips.txt logfile:/var/log/dnscrypt-blocked.log
# BlackList domains:/etc/dnscrypt-blacklist-domains.txt ips:/etc/dnscrypt-blacklist-ips.txt logfile:/var/log/dnscrypt-blocked.log



############## User identification ##############

## Use a client public key for identification
## By default, the client uses a randomized key pair in order to make tracking
## more difficult. This option does the opposite and uses a static key pair, so
## that DNS providers can offer premium services to queries signed with a known
## set of public keys. A client cannot decrypt the received responses without
## also knowing the secret key.
## The value for this property is the path to a file containing the secret key,
## encoded as a hexadecimal string. The corresponding public key is computed
## automatically.

# ClientKey /etc/dnscrypt-client-secret.key



############## Monitoring ##############

## Do not actually start the proxy, but check that a valid certificate can be
## retrieved from the server and that it will remain valid for the specified
## time period. The process exit code is 0 if a valid certificate can be used,
## 2 if no valid certificates can be used, 3 if a timeout occurred, and 4 if a
## currently valid certificate is going to expire before the given margin.
## Useful in a cron job to monitor your own dnscrypt-servers.
## The margin is specified in minutes.

# Test 2880


### log

# systemctl status dnscrypt-proxy.service
● dnscrypt-proxy.service - DNSCrypt client proxy
Loaded: loaded (/usr/lib/systemd/system/dnscrypt-proxy.service; disabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Tue 2016-12-27 22:28:45 ART; 3s ago
Docs: man:dnscrypt-proxy(8)
Process: 10592 ExecStart=/usr/bin/dnscrypt-proxy /etc/dnscrypt-proxy.conf (code=exited, status=2)
Main PID: 10592 (code=exited, status=2)

dic 27 22:28:45 hackbox systemd[1]: Started DNSCrypt client proxy.
dic 27 22:28:45 hackbox dnscrypt-proxy[10592]: Tue Dec 27 22:28:45 2016 [INFO] + DNS Security Extensions are supported
dic 27 22:28:45 hackbox dnscrypt-proxy[10592]: Tue Dec 27 22:28:45 2016 [INFO] + Provider supposedly doesn't keep logs
dic 27 22:28:45 hackbox dnscrypt-proxy[10592]: Tue Dec 27 22:28:45 2016 [NOTICE] Starting dnscrypt-proxy 1.8.1
dic 27 22:28:45 hackbox dnscrypt-proxy[10592]: Tue Dec 27 22:28:45 2016 [INFO] Loading plugin [/usr/lib/dnscrypt-proxy/libdcplugin_example_ldns_aaaa_blocking.la]
dic 27 22:28:45 hackbox dnscrypt-proxy[10592]: Tue Dec 27 22:28:45 2016 [ERROR] Plugin [/usr/lib/dnscrypt-proxy/libdcplugin_example_ldns_aaaa_blocking.la] can't be loaded: [No such file or directory]
dic 27 22:28:45 hackbox dnscrypt-proxy[10592]: Tue Dec 27 22:28:45 2016 [ERROR] Unable to load plugins
dic 27 22:28:45 hackbox systemd[1]: dnscrypt-proxy.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
dic 27 22:28:45 hackbox systemd[1]: dnscrypt-proxy.service: Unit entered failed state.
dic 27 22:28:45 hackbox systemd[1]: dnscrypt-proxy.service: Failed with result 'exit-code'.



# dnscrypt-proxy /etc/dnscrypt-proxy.conf
Tue Dec 27 22:05:45 2016 [INFO] + DNS Security Extensions are supported
Tue Dec 27 22:05:45 2016 [INFO] + Provider supposedly doesn't keep logs
Tue Dec 27 22:05:45 2016 [INFO] Loading plugin [/usr/lib/dnscrypt-proxy/libdcplugin_example_ldns_aaaa_blocking.la]
Tue Dec 27 22:05:45 2016 [ERROR] Plugin [/usr/lib/dnscrypt-proxy/libdcplugin_example_ldns_aaaa_blocking.la] can't be loaded: [No such file or directory]
Tue Dec 27 22:05:45 2016 [INFO] Loading plugin [/usr/lib/dnscrypt-proxy/libdcplugin_example_logging.la]
Tue Dec 27 22:05:45 2016 [ERROR] Plugin [/usr/lib/dnscrypt-proxy/libdcplugin_example_logging.la] can't be loaded: [No such file or directory]
Tue Dec 27 22:05:45 2016 [ERROR] Unable to load plugins

Steps to reproduce:
systemctl start dnscrypt-proxy.service
or
systemctl start dnscrypt-proxy.service
This task depends upon

Closed by  Felix Yan (felixonmars)
Friday, 30 December 2016, 03:44 GMT
Reason for closing:  Fixed
Comment by Felix Yan (felixonmars) - Thursday, 29 December 2016, 13:29 GMT
Please try "BlockIPv6 no" for the time being.

https://github.com/jedisct1/dnscrypt-proxy/issues/519
Comment by PunkiD (PunkiD) - Thursday, 29 December 2016, 15:32 GMT
Thank you very much, my apologies for the inconvenience
regards

Loading...