@max.bra hi. Sorry, I didn't understand your question. After last update service now just exits with status=218/CAPABILITIES. No idea whether it's os or kernel... limitation?
Search Criteria
Package Details: pi-hole-ftl 5.25.2-2
Package Actions
| Git Clone URL: | https://aur.archlinux.org/pi-hole-ftl.git (read-only, click to copy) |
|---|---|
| Package Base: | pi-hole-ftl |
| Description: | The Pi-hole FTL engine |
| Upstream URL: | https://github.com/pi-hole/FTL |
| Licenses: | EUPL-1.2 |
| Conflicts: | dnsmasq |
| Provides: | dnsmasq |
| Submitter: | max.bra |
| Maintainer: | max.bra (graysky) |
| Last Packager: | max.bra |
| Votes: | 54 |
| Popularity: | 0.011271 |
| First Submitted: | 2017-05-07 15:23 (UTC) |
| Last Updated: | 2024-08-10 09:53 (UTC) |
Dependencies (6)
- gmp (gmp-hgAUR)
- libidn (libidn-gitAUR)
- nettle (nettle-gitAUR)
- cmake (cmake-gitAUR) (make)
- sqlite (sqlite-fossilAUR) (make)
- xxd (vim-minimal-gitAUR, gvim-gitAUR, vim-cli-gitAUR, gvim-wayland-lilydjwg-gitAUR, gvim-gtk2AUR, gvim, tinyxxd, vim) (make)
Required by (65)
- adhocspot-script-git (requires dnsmasq)
- airgeddon (requires dnsmasq) (optional)
- anti-ad-dnsmasq-git (requires dnsmasq)
- appgate-sdp (requires dnsmasq) (optional)
- appgate-sdp-headless (requires dnsmasq) (optional)
- archpxe (requires dnsmasq)
- berate_ap-git (requires dnsmasq)
- blueman-git (requires dnsmasq) (optional)
- corplink-bin (requires dnsmasq)
- create_ap (requires dnsmasq)
- create_ap-git (requires dnsmasq)
- cuttlefish-base-git (requires dnsmasq)
- dns-zone-blacklist-git (requires dnsmasq) (optional)
- dnsmasq-china-list-git (requires dnsmasq)
- dnsmasq-openrc (requires dnsmasq)
- docker-dnsmasq (requires dnsmasq)
- docker-machine-driver-kvm2 (requires dnsmasq)
- easywifi-git (requires dnsmasq) (optional)
- ethoscope-device (requires dnsmasq)
- ethoscope-node (requires dnsmasq)
- feishu-bin (requires dnsmasq)
- gnome-network-displays (requires dnsmasq)
- gnome-network-displays-git (requires dnsmasq)
- holodev (requires dnsmasq)
- holodev-git (requires dnsmasq)
- hostsblock (requires dnsmasq) (optional)
- incus-git (requires dnsmasq)
- incus-tools-git (requires dnsmasq)
- libnm-git (requires dnsmasq) (make)
- libnm-iwd (requires dnsmasq) (make)
- libvirt-git (requires dnsmasq) (make)
- libvirt-git (requires dnsmasq) (optional)
- libvirt-xen (requires dnsmasq) (make)
- libvirt-xen (requires dnsmasq) (optional)
- linux-router (requires dnsmasq)
- linux-wifi-hotspot (requires dnsmasq) (optional)
- linux-wifi-hotspot-bin (requires dnsmasq) (optional)
- lxc-git (requires dnsmasq) (optional)
- lxc-selinux (requires dnsmasq) (optional)
- lxd-git (requires dnsmasq)
- lxd516 (requires dnsmasq)
- minimega (requires dnsmasq) (optional)
- netns-helper-git (requires dnsmasq) (optional)
- networkmanager-git (requires dnsmasq) (make)
- networkmanager-git (requires dnsmasq) (optional)
- networkmanager-iwd (requires dnsmasq) (make)
- networkmanager-iwd (requires dnsmasq) (optional)
- networkmanager-support (requires dnsmasq)
- nm-cloud-setup-git (requires dnsmasq) (make)
- nm-iwd-cloud-setup (requires dnsmasq) (make)
- overture (requires dnsmasq) (optional)
- p-rout-git (requires dnsmasq)
- pi-hole-server
- pi-hole-standalone
- pinephone-dev-tools (requires dnsmasq)
- podman-dnsname-git (requires dnsmasq)
- rbenv-vagrant-setup-git (requires dnsmasq) (optional)
- simonpi (requires dnsmasq)
- simonpi-git (requires dnsmasq)
- ss-tproxy (requires dnsmasq)
- ss-tproxy-git (requires dnsmasq)
- vagrant-git (requires dnsmasq) (optional)
- virter (requires dnsmasq) (optional)
- waydroid (requires dnsmasq)
- waydroid-git (requires dnsmasq)
Sources (6)
pepper_chico commented on 2019-10-07 00:47 (UTC)
max.bra commented on 2019-10-06 22:28 (UTC)
hi pepper_chico, os and kernel?
pepper_chico commented on 2019-10-06 19:03 (UTC) (edited on 2019-10-06 19:05 (UTC) by pepper_chico)
After latest update there's some issue with the service (it starts without errors running as sudo, maybe pihole user needs to be part of a new group?):
[I] ➜ sudo systemctl status pihole-FTL
* pihole-FTL.service - Pi-hole FTLDNS engine
Loaded: loaded (/usr/lib/systemd/system/pihole-FTL.service; disabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Sun 2019-10-06 15:56:59 -03; 3s ago
Process: 1016 ExecStartPre=/bin/chown -R pihole:pihole /etc/pihole (code=exited, status=0/SUCCESS)
Process: 1018 ExecStart=/usr/bin/pihole-FTL no-daemon (code=exited, status=218/CAPABILITIES)
Main PID: 1018 (code=exited, status=218/CAPABILITIES)
Oct 06 15:56:59 planck systemd[1]: pihole-FTL.service: Service RestartSec=100ms expired, scheduling restart.
Oct 06 15:56:59 planck systemd[1]: pihole-FTL.service: Scheduled restart job, restart counter is at 5.
Oct 06 15:56:59 planck systemd[1]: Stopped Pi-hole FTLDNS engine.
Oct 06 15:56:59 planck systemd[1]: pihole-FTL.service: Start request repeated too quickly.
Oct 06 15:56:59 planck systemd[1]: pihole-FTL.service: Failed with result 'exit-code'.
Oct 06 15:56:59 planck systemd[1]: Failed to start Pi-hole FTLDNS engine.
max.bra commented on 2019-10-06 10:58 (UTC)
@danieltetraquark don't worry, ignore it
danieltetraquark commented on 2019-10-06 10:50 (UTC) (edited on 2019-10-06 10:51 (UTC) by danieltetraquark)
I get the warning
chown: invalid user: ‘pihole.pihole’
when updating.
max.bra commented on 2019-09-24 15:35 (UTC)
@SRossi hvindin git repo?
anyway, i like che 'AmbientCapabilities=' implementation. I will test it asap...
SRossi commented on 2019-09-24 14:22 (UTC)
@max.bra
The following service file allows FTL to run as user pihole again: https://0bin.net/paste/ZjKIlXFQ7unvMBxK#tVfHEmpBAxCaFORXAA+lEO-IvYktGW9YNYwewvMH+JN
I hope you can use it for the next version.
SRossi commented on 2019-08-24 07:56 (UTC)
Further details on why and how user pihole is recommended to be used to run FTL: https://docs.pi-hole.net/ftldns/in-depth/#linux-capabilities
If you still think it's necessary to run FTL as root, could you please explain why? Your argument that FTL drops root privileges immediately after start is obviously not true as can be seen by simply checking the process list.
While digging, I also wondered why you chose the no-daemon option.
Thanks for your time and effort in maintaining this AUR package. I sure appreciate the convenience of it.
max.bra commented on 2019-08-24 07:46 (UTC)
That is dnsmasq instance and it needs root privileges. Feel free to submit me a non rocket science patch when you want.
Pinned Comments
max.bra commented on 2018-02-09 16:46 (UTC) (edited on 2019-10-18 23:13 (UTC) by max.bra)
ArchLinux Pi-hole is not officially supported by Pi-hole project. In case of bugs and malfunctions please DO NOT file a report upstream.
First of all check if the wiki (https://wiki.archlinux.org/index.php/Pi-hole) can help then ask here for assistance and tips.
When it will be excluded that the problem does not depend on ArchLinux we will file a bug upstream.