Talk:DNSCrypt

Category:DNS maybe? It should be a subcategory of Software I guess. WubTheCaptain (talk) 19:25, 13 February 2014 (EST)

systemd

It would be nice if someone experienced with systemd could write about how to run DNSCrypt as another (isolated) user, for security reasons. Normally, to do something like that, one would run sudo -H --user=dnscrypt bash -c '/usr/local/sbin/dnscrypt-proxy -R dnscrypt.eu-nl'.

Thanks.

-- Galactus (talk) 19:42, 16 December 2015 (EST)

dnscrypt-proxy has a -u flag that drops privileges and chroots to the user's home directory; otherwise systemd service files have some User= flag or some dogshit like that. Keboler (talk) 11:55, 27 December 2015 (EST)

Oh, you're right. That will make things easier. (OpenRC has that too, DNSCRYPT_USER, in conf.d) — Galactus (talk) 17:38, 27 December 2015 (EST)

Hang on, does DNSCrypt really depend on systemd or is it just in the configure script? I have ran DNSCrypt on both this Void Lunix system and on OpenBSD without troubles. Keboler (talk) 11:26, 30 December 2015 (EST)

It has 2 services for systemd, which is dnscrypt.service and dnscrypt.socket, maybe it depends on systemd for the sake of simplicity.  Morpheus talk 21:04, 30 December 2015 (EST)

It doesn't *need* it, but the source includes a unit.service and unit.socket file for the sake of simplicity when setting things up, since unfortunately, most distros rely on systemcancer. — Galactus (talk) 13:10, 1 January 2016 (EST)