{"action":"created","issue":{"url":"https://api.github.com/repos/jedisct1/dnscrypt-proxy/issues/480","repository_url":"https://api.github.com/repos/jedisct1/dnscrypt-proxy","labels_url":"https://api.github.com/repos/jedisct1/dnscrypt-proxy/issues/480/labels{/name}","comments_url":"https://api.github.com/repos/jedisct1/dnscrypt-proxy/issues/480/comments","events_url":"https://api.github.com/repos/jedisct1/dnscrypt-proxy/issues/480/events","html_url":"https://github.com/jedisct1/dnscrypt-proxy/issues/480","id":180759361,"number":480,"title":"proxy doesn't start on Ubuntu 16.04 when installed with dnscrypt-loader","user":{"login":"WeirdConnection","id":22603229,"avatar_url":"https://avatars.githubusercontent.com/u/22603229?v=3","gravatar_id":"","url":"https://api.github.com/users/WeirdConnection","html_url":"https://github.com/WeirdConnection","followers_url":"https://api.github.com/users/WeirdConnection/followers","following_url":"https://api.github.com/users/WeirdConnection/following{/other_user}","gists_url":"https://api.github.com/users/WeirdConnection/gists{/gist_id}","starred_url":"https://api.github.com/users/WeirdConnection/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/WeirdConnection/subscriptions","organizations_url":"https://api.github.com/users/WeirdConnection/orgs","repos_url":"https://api.github.com/users/WeirdConnection/repos","events_url":"https://api.github.com/users/WeirdConnection/events{/privacy}","received_events_url":"https://api.github.com/users/WeirdConnection/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/jedisct1/dnscrypt-proxy/labels/linux%20distro%20specific","name":"linux distro specific","color":"fef2c0"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-10-03T22:06:24Z","updated_at":"2016-10-20T20:10:30Z","closed_at":null,"body":"I hope this is the right place to post this:\r\n\r\nI've set up DNSCrypt, dnscrypt-loader and unbound on Ubuntu Studio 16.04.1. unbound seems to be working without dnscrypt, but I can't open any site when I try to use it with dnscrypt.\r\n\r\nDNSCrypt-loader configurations:\r\n`cChroot=\"dnscrypt\"\r\n\r\ncPrimaryIP=\"127.0.1.2\"\r\ncPrimaryPort=\"5351\"\r\n\r\ncSecondaryIP=\"127.0.1.2\"\r\ncSecondaryPort=\"5352\"\r\n\r\ncProxyBaseDir=\"/usr/local/sbin/\"\r\ncProxyBaseName=\"dnscrypt-proxy\"\r\ncProxyApp=\"$cProxyBaseDir$cProxyBaseName\"\r\n\r\ncCSVBaseDir=\"/usr/local/share/dnscrypt-proxy/\"\r\ncCSVBaseName=\"dnscrypt-resolvers.csv\"\r\ncCSVFile=\"$cCSVBaseDir$cCSVBaseName\"\r\n\r\ncSIGBaseDir=\"/usr/local/share/dnscrypt-proxy/\"\r\ncSIGBaseName=\"dnscrypt-resolvers.csv.minisig\"\r\ncSIGFile=\"$cSIGBaseDir$cSIGBaseName\"\r\n\r\ncDaemon=\"$cProxyApp --daemonize \"\r\ncLocalAddress1=\"--local-address=$cPrimaryIP:$cPrimaryPort \"\r\ncLocalAddress2=\"--local-address=$cSecondaryIP:$cSecondaryPort \"\r\ncResolverAddress=\"--resolver-address\"\r\ncProviderName=\"--provider-name\"\r\ncProviderKey=\"--provider-key\"\r\ncResolverList=\"--resolvers-list=$cCSVFile \"\r\ncUser=\"--user=$cChroot\"\r\ncOtherParams=\"--ephemeral-keys \"\r\n\r\ncCSVURL=\"https://download.dnscrypt.org/dnscrypt-proxy/dnscrypt-resolvers.csv\"\r\n\r\ncSIGURL=\"https://download.dnscrypt.org/dnscrypt-proxy/dnscrypt-resolvers.csv.minisig\"\r\n\r\ncDigTarget=\"internic.net\"\r\ncDigTries=2\r\ncDigTime=5\r\n\r\ncAnonymousOnly=true\r\n\r\ncIPVersion=\"ipv4\"\r\n\r\ncEnableSignCheck=true\r\n\r\ncGUI=\"whiptail\"`\r\n\r\nRelevant unbound configs:\r\n`do-not-query-localhost: no\r\n\r\nforward-zone:\r\n  name: \".\"\r\n  forward-addr: 127.0.1.2@5351`\r\n\r\nIf I set the forward-addr: 8.8.8.8, everything's working, but when I try to use dnscrypt I can't open any site. \r\n\r\nHere's a result of dig not using dnscrypt:\r\n`user@Host:~$ dig google.com\r\n\r\n; <<>> DiG 9.10.3-P4-Ubuntu <<>> google.com\r\n;; global options: +cmd\r\n;; Got answer:\r\n;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29460\r\n;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1\r\n\r\n;; OPT PSEUDOSECTION:\r\n; EDNS: version: 0, flags:; udp: 4096\r\n;; QUESTION SECTION:\r\n;google.com.\t\t\tIN\tA\r\n\r\n;; ANSWER SECTION:\r\ngoogle.com.\t\t299\tIN\tA\t216.58.214.206\r\n\r\n;; Query time: 64 msec\r\n;; SERVER: 127.0.0.1#53(127.0.0.1)\r\n;; WHEN: Mon Oct 03 23:38:36 CEST 2016\r\n;; MSG SIZE  rcvd: 55`\r\n\r\nAnd with dnscrypt:\r\n`user@Host:~$ dig @127.0.1.2 -p 5351 google.com\r\n\r\n; <<>> DiG 9.10.3-P4-Ubuntu <<>> @127.0.1.2 -p 5351 google.com\r\n; (1 server found)\r\n;; global options: +cmd\r\n;; connection timed out; no servers could be reached`\r\n\r\ndnscrypt-loader status:\r\n`DNSCrypt-proxy  Loaded instances                                           \r\n  │                                                                             \r\n  │  --- Configs ---                                                            \r\n  │  Running as     = dnscrypt                                                  \r\n  │  Anonymous only = true                                                      \r\n  │  Sign check     = true                                                      \r\n  │  IP Version     = ipv4                                                      \r\n  │                                                                             \r\n  │  --- Primary DNS ---                                                        \r\n  │  Status         = Running [3691]                                            \r\n  │  Execution time = 21:07 01:01:43 (Date days-hh:mm:ss)                       \r\n  │  Proxy IP       = 127.0.1.2:5351                                            \r\n  │  Resolver IP    = 185.121.25.85                                             \r\n  │  Resolver name  = 2.dnscrypt-cert.uk.d0wn.biz                               \r\n  │  Resolver test  = Dig Query Time  :  msec \r\n                                                                           \r\n  │  --- Secondary DNS ---                                                      \r\n  │  Status         = Running [3862]                                            \r\n  │  Execution time = 21:07 01:01:41 (Date days-hh:mm:ss)                       \r\n  │  Proxy IP       = 127.0.1.2:5352                                            \r\n  │  Resolver IP    = 95.154.236.104                                            \r\n  │  Resolver name  = 2.dnscrypt-cert.fvz-rec-gb-lon-03.dnsrec.meo.ws           \r\n  │  Resolver test  = Dig Query Time  :  msec`\r\n\r\nAlso this seems to be related somehow: since I've started tinkering with the network, when I sudo, it prints `sudo: unable to resolve host Host` then prompts for my password. With certain settings it took really long to respond.\r\n\r\nIt seems like everything is fine, yet DNSCrypt not working. So I'd like your help, since I've kinda run out of ideas on how to proceed...\r\nThanks!\r\n"},"comment":{"url":"https://api.github.com/repos/jedisct1/dnscrypt-proxy/issues/comments/255214255","html_url":"https://github.com/jedisct1/dnscrypt-proxy/issues/480#issuecomment-255214255","issue_url":"https://api.github.com/repos/jedisct1/dnscrypt-proxy/issues/480","id":255214255,"user":{"login":"WeirdConnection","id":22603229,"avatar_url":"https://avatars.githubusercontent.com/u/22603229?v=3","gravatar_id":"","url":"https://api.github.com/users/WeirdConnection","html_url":"https://github.com/WeirdConnection","followers_url":"https://api.github.com/users/WeirdConnection/followers","following_url":"https://api.github.com/users/WeirdConnection/following{/other_user}","gists_url":"https://api.github.com/users/WeirdConnection/gists{/gist_id}","starred_url":"https://api.github.com/users/WeirdConnection/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/WeirdConnection/subscriptions","organizations_url":"https://api.github.com/users/WeirdConnection/orgs","repos_url":"https://api.github.com/users/WeirdConnection/repos","events_url":"https://api.github.com/users/WeirdConnection/events{/privacy}","received_events_url":"https://api.github.com/users/WeirdConnection/received_events","type":"User","site_admin":false},"created_at":"2016-10-20T20:10:30Z","updated_at":"2016-10-20T20:10:30Z","body":"Ubuntu Studio 16.04.1\r\ndnscrypt-proxy 1.7.0\r\ndnscrypt-loader 1.2\r\n\r\nI installed them manually. Now, that you mentioned, I've found a dnscrypt-proxy 1.6.1-1 package. So I'll try that, and report back with my findings.\r\n\r\nIn the meantime here's the last 4 lines from syslog concerning dnscrypt-proxy:\r\n```\r\nOct 10 11:16:41 Host dnscrypt-proxy[2774]: Refetching server certificates\r\nOct 10 11:16:51 Host dnscrypt-proxy[3249]: Refetching server certificates\r\nOct 10 11:16:56 Host dnscrypt-proxy[2774]: Unable to retrieve server certificates\r\nOct 10 11:17:06 Host dnscrypt-proxy[3249]: Unable to retrieve server certificates\r\n```\r\nIt is logged every 5 minutes, with some few hour gaps. What's interesting is that the latest is 10days old, yet dnscrypt-loader reported that dnscrypt-proxy is running. Also the latest syslog records about dnscrypt-loader are form Oct 9th. Yet I have these lines in crontab, which should \"Download from official source, performs signature check and updates the resolvers.csv file\" and \"Load DNSCrypt-proxy using a resolver randomly choosed by DNSCrypt-loader\" respectively:\r\n```\r\n@reboot root exec /usr/local/sbin/dnscrypt-loader -u\r\n@reboot root exec /usr/local/sbin/dnscrypt-loader -r\r\n```\r\nObviously, I have booted since then."}}
{"actor":{"display_login":"WeirdConnection"}}