DNSCrypt

PPA description

Packages from Vivid 15.04 now support only systemd
__________________________________________________

A protocol for securing communications between a client and a DNS resolver.

http://dnscrypt.org/

List of free, DNSCrypt-enabled resolvers
________________________________________

To get started, you can use any of the public DNS resolvers supporting DNSCrypt.

https://github.com/jedisct1/dnscrypt-proxy/blob/master/dnscrypt-resolvers.csv

The packaging used for this branch is maintained in the official DNSCrypt git repository.

https://github.com/jedisct1
https://github.com/jedisct1/dnscrypt-proxy
https://github.com/jedisct1/libsodium

The official sources download website are

https://download.dnscrypt.org/dnscrypt-proxy/
https://download.libsodium.org/libsodium/releases/

Add the PPA, enable source code repository as well and then run:
$ apt-get source dnscrypt-proxy
$ sha256sum dnscrypt-proxy_1.4.3.orig.tar.bz2
The output should match the output of:
$ dig +short +dnssec TXT dnscrypt-proxy-1.4.3.tar.bz2.download.dnscrypt.org
And don't forget to do the same for libsodium:
$ apt-get source libsodium
$ dig +dnssec +short TXT libsodium-1.0.1.tar.gz.download.libsodium.org
You can also build the packages by yourself with debuild or:
$ dpkg-checkbuilddeps
$ dpkg-buildpackage -rfakeroot -us -uc

[NOTE]: Ubuntu has released a libsodium source for its Wily Werewolf
        15.10 which is different in size from the upstream repository.
        See https://launchpad.net/ubuntu/+source/libsodium
        Hence I am using the tar xz compression for my packages.

To get an idea of which first local address your system is using for DNS
________________________________________________________________________

$ cat /etc/resolv.conf
# Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)
# DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
nameserver 127.0.1.1

For Trusty 14.04 and Precise 12.04 Users [UPDATE]
_________________________________________________

The published packages use Upstart.

I did create a second package named dnscrypt-proxy2 to be able to have a second DNS up and running in case the first fails (like in M$ Windows).

My packages provides already 6 resolvers defined [from file /usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv] in /etc/default/dnscrypt-proxy. Just uncomment the one you would like to use and comment out the default.

The default DNS resolver 1 is set to dnscrypt.eu-nl

The first DNS is defined by package dnscrypt-proxy. By default its local address is now 127.0.1.1 So don't forget to set in System Settings --> Network Settings the DNS Server Address the same 127.0.1.1 address

The default DNS resolver 2 is set to dnscrypt.eu-dk

The second DNS is defined by package dnscrypt-proxy2. By default its local address is now 127.0.1.2 It cannot be installed alone and it's only available as an addition to dnscrypt-proxy. So don't forget to add in System Settings --> Network Settings the DNS 2 Server Address. This will be IPv4 --> DNS Servers 127.0.1.1, 127.0.1.2

Select the DNS you would like to use by its ping response time, reliability and supported features.

I will provide a second DNS as well for systemd machines when I have time.

For Vivid 15.04, Wily 15.10 and Xenial 1604 Users [UPDATE]
__________________________________________________________

The published packages use Systemd.

I did create a second package named dnscrypt-proxy2 to be able to have a second DNS up and running in case the first fails (like in M$ Windows).

The default DNS resolver 1 is set to dnscrypt.eu-nl

The first DNS is defined by package dnscrypt-proxy. By default its local address is now 127.0.1.1 So don't forget to set in System Settings --> Network Settings the DNS Server Address the same 127.0.2.1 address

The default DNS resolver 2 is set to dnscrypt.eu-dk

The second DNS is defined by package dnscrypt-proxy2. By default its local address is now 127.0.1.2 It cannot be installed alone and it's only available as an addition to dnscrypt-proxy. So don't forget to add in System Settings --> Network Settings the DNS 2 Server Address. This will be IPv4 --> DNS Servers 127.0.2.1, 127.0.2.2

If you want to change the resolver look at file /usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv to get the required data. Then update the config files in /etc accordingly.

Testing which DNS Resolver your System is Using
_______________________________________________

To test which DNS your system is using please visit : https://dnsleaktest.com/

Source
______

I have used for this ppa the previous work of Sergey "Shnatsel" Davidoff with some tunings:

https://launchpad.net/~shnatsel/+archive/ubuntu/dnscrypt

* Using the latest sources tarballs.
* Optimizing the code for Quad Core (Compiler option -O3) instead of Core
  Duo (Compiler option -O2).
* Upgrading the Debian compat to 9 as this is placing the libraries in the
  standard Debian path instead of the RPM (Red Hat) path.
* Given the home page hijack and the kept log by US based OpenDNS, these
  packages use by default the DNSCrypt.eu server based in The Hague, Holland.
  Still you can change the DNS resolver by editing the
  /etc/default/dnscrypt-proxy section # Remote DNS(Crypt) provider settings

Adding this PPA to your system

You can update your system with unsupported packages from this untrusted PPA by adding ppa:anton+/dnscrypt to your system's Software Sources. (Read about installing)

sudo add-apt-repository ppa:anton+/dnscrypt
sudo apt-get update
        
Technical details about this PPA

This PPA can be added to your system manually by copying the lines below and adding them to your system's software sources.

Display sources.list entries for:
deb http://ppa.launchpad.net/anton+/dnscrypt/ubuntu YOUR_UBUNTU_VERSION_HERE main 
deb-src http://ppa.launchpad.net/anton+/dnscrypt/ubuntu YOUR_UBUNTU_VERSION_HERE main 
Signing key:
4096R/77A67176B2F831A94E5E9591E058073A72B61DBF (What is this?)
Fingerprint:
77A67176B2F831A94E5E9591E058073A72B61DBF

For questions and bugs with software in this PPA please contact Pascal Mons.

PPA statistics

Activity
0 updates added during the past month.
View package details

Overview of published packages

122 of 22 results
Package Version Uploaded by
autoconf 2.69-8.1~pmo1~trusty Pascal Mons (2015-03-05)
autoconf 2.69-8.1~pmo1~precise Pascal Mons (2015-03-05)
automake-1.14 1:1.14.1-3.1~pmo2~precise Pascal Mons (2015-03-05)
automake-1.14 1:1.14.1-3.1~pmo1~trusty Pascal Mons (2015-03-05)
dnscrypt-proxy 1.6.1-1pmo3~xenial Pascal Mons (2016-03-26)
dnscrypt-proxy 1.6.1-1pmo3~wily Pascal Mons (2016-03-26)
dnscrypt-proxy 1.6.1-1pmo3~vivid Pascal Mons (2016-03-26)
dnscrypt-proxy 1.6.1-1pmo3~trusty Pascal Mons (2016-03-22)
dnscrypt-proxy 1.6.1-1pmo3~precise Pascal Mons (2016-03-22)
dnscrypt-proxy2 1.6.1-1pmo2~xenial Pascal Mons (2016-03-26)
dnscrypt-proxy2 1.6.1-1pmo2~wily Pascal Mons (2016-03-26)
dnscrypt-proxy2 1.6.1-1pmo2~vivid Pascal Mons (2016-03-26)
dnscrypt-proxy2 1.6.1-1pmo2~trusty Pascal Mons (2016-03-26)
dnscrypt-proxy2 1.6.1-1pmo2~precise Pascal Mons (2016-03-26)
libsodium 1.0.8-5pmo1~xenial Pascal Mons (2016-03-22)
libsodium 1.0.8-5pmo1~wily Pascal Mons (2016-03-22)
libsodium 1.0.8-5pmo1~vivid Pascal Mons (2016-03-22)
libsodium 1.0.8-5pmo1~trusty Pascal Mons (2016-03-22)
libsodium 1.0.8-5pmo1~precise Pascal Mons (2016-03-22)
pkg-config 0.28-1ubuntu1.01~vivid Pascal Mons (2015-03-05)
pkg-config 0.28-1ubuntu1.01~trusty Pascal Mons (2015-03-05)
pkg-config 0.28-1ubuntu1.01~precise Pascal Mons (2015-03-05)
122 of 22 results

Latest updates

  • dnscrypt-proxy2 87 weeks ago
    Successfully built
  • dnscrypt-proxy2 87 weeks ago
    Successfully built
  • dnscrypt-proxy2 87 weeks ago
    Successfully built
  • dnscrypt-proxy2 87 weeks ago
    Successfully built
  • dnscrypt-proxy2 87 weeks ago
    Successfully built