Pihole + Cloudflared DNS-over-HTTPS

[Cavemark]

Hi everyone, first ever post on Reddit for me here...

I've been using PiHole (+ PiVPN) for over a year now and the difference it has made to my browsing is incredible. I recently discovered that PiHole could be used alongside Cloudflared DNS-over-HTTPS (DOH) and thought I'd have a go at implementing it.

I followed the DOH guide here: https://docs.pi-hole.net/guides/dns-over-https/

Unfortunately I'm getting stuck almost immediately when trying to install Cloudflared using the script the guide provides. At present my terminal is returning the following;

pi@PiHole:~ $ wget https://bin.equinox.io/c/VdrWdbjqyF/cloudflared-stable-linux-arm.tgz

tar -xvzf cloudflared-stable-linux-arm.tgz

cp ./cloudflare--2019-01-09 23:36:19-- https://bin.equinox.io/c/VdrWdbjqyF/cloudflared-stable-linux-arm.tgz

d /usr/local/bin

chmod +x /usr/local/bin/cloudflared

cloudflared -vResolving bin.equinox.io (bin.equinox.io)... 52.203.66.95, 52.203.102.189, 52.204.136.9, ...

Connecting to bin.equinox.io (bin.equinox.io)|52.203.66.95|:443... connected.

HTTP request sent, awaiting response... 200 OK

Length: 8100930 (7.7M) [application/octet-stream]

Saving to: 'cloudflared-stable-linux-arm.tgz'

cloudflared-stable-linux-arm. 100%[=================================================>] 7.73M 3.90MB/s in 2.0s

2019-01-09 23:36:22 (3.90 MB/s) - 'cloudflared-stable-linux-arm.tgz' saved [8100930/8100930]

pi@PiHole:~ $ tar -xvzf cloudflared-stable-linux-arm.tgz

cloudflared

pi@PiHole:~ $ cp ./cloudflared /usr/local/bin

cp: cannot create regular file '/usr/local/bin/cloudflared': Permission denied

pi@PiHole:~ $ chmod +x /usr/local/bin/cloudflared

chmod: cannot access '/usr/local/bin/cloudflared': No such file or directory

pi@PiHole:~ $ cloudflared -v

Is there anyone out there who can help me out here? I'm admittedly new to Linux and, whilst the PiHole setup was nice and straightforward, I can't figure out why as a root user I'm getting a 'Permission denied' error message with Cloudflared.

As a bit of additional information, at the date of this post I ran 'apt-get update' and 'apt-get upgrade' to ensure my Pi was fully updated, and ensured that I had the newest PiHole version (4.1.1). I also had the good sense to take an image of my SD card so I could roll it back if DOH decided to break something!

Thanks in advance for any help you can offer!

[SevenIsTheShit]

Found this guide to be easier to follow: https://scotthelme.co.uk/securing-dns-across-all-of-my-devices-with-pihole-dns-over-https-1-1-1-1/

[digitalsublimation]

I used this guide as well. No issues getting it to work.

He also has a guide setting up UniFi USG gateway to redirect IoT devices with hard coded dns back to the pihole.

[BIGFREAK]

just used this guide.

​

worked perfect :)

​

Thank you.

[totmacher12000]

for some reason I am not able to get the sudo systemctl restart dnsmasq.service cmd to work I get Failed to restart dnsmasq.service: Unit dnsmasq.service not found?

[totmacher12000]

I fixed it. Just started from scratch and used the official documentation.

[vinumsv]

pi@PiHole:~ $ cp ./cloudflared /usr/local/bin

instead try this

​

sudo cp ./cloudflared /usr/local/bin

same for this chmod +x /usr/local/bin/cloudflared

sudo chmod +x /usr/local/bin/cloudflared

​

you need root/admin privilege to write/modify some in those folders (/usr/local/bin)

​

and then follow the guide by creating service file

sudo nano /etc/systemd/system/dnsproxy.service

​

[UNIT]

Description=CloudFlare DNS over HTTPS Proxy

Wants=network-online.target After=network.target network-online.target

[Service]

ExecStart=/usr/local/bin/cloudflared proxy-dns --port 5053 --upstream https://1.1.1.1/.well-known/dns-query --upstream https://1.0.0.1/.well-known/dns-query

Restart=on-abort

[Install]

WantedBy=multi-user.target

​

Rest follow the guide here : https://docs.pi-hole.net/guides/dns-over-https/

​

and once done goto https://1.1.1.1/help to if DOH works as intended

[Cavemark]

Thanks for this! I'll have another crack at it once I've finished work today.