A minimal docker image with dnscryptwrapper.

Work in progress, currently builds dnscrypt-wrapper

Maintainer: Egon Kidmose, kidmose@gmail.com

Copyright: dnscrypt.io

Requirements

Docker

Usage

To build the image:

docker build -t dnscrypt-wrapper .

To start a container:

KEYDIR=<WHERE-KEYS-RESIDE-ON-HOST>
docker run --volume=$KEYDIR:/opt/dnscrypt-wrapper/etc/keys --publish=127.0.0.1:4443:4443/udp dnscrypt-wrapper \
--listen-address=0.0.0.0:4443 \
--resolver-address=8.8.8.8:53 \
--provider-name=2.dnscrypt-cert.example.com \
--provider-cert-file=/opt/dnscrypt-wrapper/etc/keys/dnscrypt.cert \
--crypt-secretkey-file=/opt/dnscrypt-wrapper/etc/keys/dnscrypt.key \
--daemonize

To start a container in interactive mode, e.g. for test and debugging:

KEYDIR=<WHERE-KEYS-RESIDE-ON-HOST>
docker run --interactive --tty --volume=$KEYDIR:/opt/dnscrypt-wrapper/etc/keys --publish=127.0.0.1:4443:4443/udp dnscrypt-wrapper \
--listen-address=0.0.0.0:4443 \
--resolver-address=8.8.8.8:53 \
--provider-name=2.dnscrypt-cert.example.com \
--provider-cert-file=/opt/dnscrypt-wrapper/etc/keys/dnscrypt.cert \
--crypt-secretkey-file=/opt/dnscrypt-wrapper/etc/keys/dnscrypt.key

To test (requires dnscrypt-proxy):

sudo /opt/dnscrypt-proxy/sbin/dnscrypt-proxy \
--provider-key=2DE4:CBAF:D282:6AD0:1DD6:7633:2D83:50E0:B3F6:3699:943E:4D15:42B8:9430:3F1E:1E3F \
--resolver-address=127.0.0.1:4443 \
--provider-name=2.dnscrypt-cert.example.com

Credit

The Dockerfile in this project is based on dnscrypt-server-docker by Frank Denis.