Skip to content

Installation on Arch Linux

Jump to bottom Edit New page
nxnjz edited this page Jul 13, 2019 · 4 revisions

Installation on Arch Linux

pacman -S dnscrypt-proxy

There are two mutually exclusive ways to start dnscrypt-proxy: either with systemd socket activation, or the systemd service file.

Socket Activation

Note: Make sure to edit your /etc/dnscrypt-proxy/dnscrypt-proxy.toml accordingly (use an empty set for your listen_addresses, aka. listen_addresses = [ ]).

Activate & start the systemd socket (defaults to port 53 for ipv4), which will automatically start the service:

systemctl enable --now dnscrypt-proxy.socket

Service File

Note: Make sure to edit your /etc/dnscrypt-proxy/dnscrypt-proxy.toml accordingly (setup listen_addresses).

Enable & start the systemd service directly, without using socket activation:

systemctl enable --now dnscrypt-proxy.service

Further Reading

For more on the dnscrypt-proxy package, refer to its Arch Wiki page. Consider also the forums if you have questions.

Refer to the official systemd manual pages for more on how to work with services and sockets.

In somecases if you want to run dnscrypt-proxy as a non-root user you'll get the error "[FATAL] listen udp 0.0.0.0:53: bind: permission denied"

to solve this problem you can run the following command and allow dnscrypt to have access to a low level port :

sudo setcap cap_net_bind_service=+ep $(which dnscrypt-proxy)

Clone this wiki locally