Pi-Hole Discussion Thread

[Jurong640]

IMHO.
Could be linux also. I hope I got no issue if i use mini PC.
The orange pi's linux is stable ?

My orangepi zero 3 have been running super stable for over a year now.

 

[xiaofan]

i have a Chuwi N100 mini-pc, i think mine only 8 or 16GB RAM only. but never really use it for now.

I tried and attempt installing pi-hole as backup, but kept failing. So now only rely on my orange pi zero 3

I have four Chuwi mini PC, with Intel N4500, J4125, and two Intel N100 CPU. All have 8GB RAM and 256 GB SSD. Except the J4125 version which has 2.5Gbe port, the other three have gigabit LAN port.

The first two run Windows pretty slowly and I deleted Windows very soon. The two Intel N100 mini PCs can run Windows 11 but Windows Update can take a long time so in the end I deleted Windows as well.

Now they run NetBSD, OpenBSD, FreeBSD and Debian/Ubuntu Linux. I added cheap SATA 128GB/256GB SSD to have dual boot.

My Pi-hole and Adguard Home LxC containers run on my other three Intel N100 mini PCs running Proxmox VE virtualization platform: one with dual 10Gbe SFP+ ports abs dual 2.5Gbe ports, another one with quad 2.5Gbe ports, last one with dual 2.5Gbe ports. These three are the backbones of my mini "Home Lab" together with one 10Gbe switch, one 2.5Gbe/10Gbe mix switch and one 2.5Gbe switch.

I have one Raspberry Pi 500 and two Raspberry Pi 400.

Then I have two Raspberry Pi 3B+ and two Raspberry Pi 2B. I have also quite a few old Orange Pi boards and other Linux development boards as well (some of them bought back in 2018) but most of them are lying idle.

 

[Jurong640]

The repo and the account were locked again, so I opened another ticket with GitHub. Their automatic fraud detection is “very frustrating.” No idea how long it will take. Last time, it was bots that reported the repository en masse. Let's see what the reason is this time...

This time, GitHub didn’t notify me about the lock; a user reported it to me.

The mirror on GitLab is online, and the CDN links from jsDelivr are still working.

https://gitlab.com/hagezi/mirror

 

[sibeiTrolled]

The repo and the account were locked again, so I opened another ticket with GitHub. Their automatic fraud detection is “very frustrating.” No idea how long it will take. Last time, it was bots that reported the repository en masse. Let's see what the reason is this time...

This time, GitHub didn’t notify me about the lock; a user reported it to me.

The mirror on GitLab is online, and the CDN links from jsDelivr are still working.

https://gitlab.com/hagezi/mirror

ya, using his PRO + TIF list.. realize got sync issue also.
Lucky my system using his jsdelivr links, but my browser using the github one

 

[Jurong640]

I replaced my P i-h o l e with this​

DNS filtering by Control D is now available to Tailscale customers through the Tailscale sales team. It can block malware, phishing, ads, trackers, and other unwanted websites. You can apply different filtering rules to groups, tags, or individual devices across your tailnet.

 

[sacar101]

Update your piOS(raspbian) if you are using unbound.

Critical 9.8 vulnerability in Unbound up to and including version 1.26.0.

To check you current unbound version.

apt policy unbound

 

[Jurong640]

Update your piOS(raspbian) if you are using unbound.

Critical 9.8 vulnerability in Unbound up to and including version 1.26.0.

To check you current unbound version.

apt policy unbound

that is only for Raspberry pi only? I'm using Orangepi, need update as well?

 

[xiaofan]

that is only for Raspberry pi only? I'm using Orangepi, need update as well?

This has nothing to do with Pi-hole itself, but rather who use Pi-hole on top of Unbound DNS.

Unbound DNS is not the default for typical Linux system, including Raspberry Pi OS or Armbian or OrangePi's default distributions.

More about Pi-hole on top of Unbound.
https://docs.pi-hole.net/guides/dns/unbound/

Unbound is often the default DNS provider for FreeBSD and OpenBSD, including FreeBSD based pfSense and OPNsense.

 

[Jurong640]

This has nothing to do with Pi-hole itself, but rather who use Pi-hole on top of Unbound DNS.

Unbound DNS is not the default for typical Linux system, including Raspberry Pi OS or Armbian or OrangePi's default distributions.

i know, i am using Unbound on Pi Hole. But the comment said "Update your piOS(raspbian)", that is why i'm asking if it's applicable to my Orangepi using linux as well.

 

[xiaofan]

i know, i am using Unbound on Pi Hole. But the comment said "Update your piOS(raspbian)", that is why i'm asking if it's applicable to my Orangepi using linux as well.

I see. In that case, you may want to update your unbound installation if the version is affected.

It is not specific to Raspberry Pi OS.

 

[sacar101]

that is only for Raspberry pi only? I'm using Orangepi, need update as well?

All version unbound except the latest one are affected. I recommend to update because it was the easiest way to update unbound version (at least for piOS) imo.

I'm not familar with Orangepi (Orange Pi OS). But I believe they maintain their own packagers. So it might not update to the latest version (1.26.1).

My suggestion is to run:

sudo apt upgrade unbound

Then check unbound version:

apt policy unbound

And hope for the best. Another distro that I know unbound is up to date is dietpi.

 

[Jurong640]

All version unbound except the latest one are affected. I recommend to update because it was the easiest way to update unbound version (at least for piOS) imo.

I'm not familar with Orangepi (Orange Pi OS). But I believe they maintain their own packagers. So it might not update to the latest version (1.26.1).

My suggestion is to run:

sudo apt upgrade unbound

Then check unbound version:

apt policy unbound

And hope for the best. Another distro that I know unbound is up to date is dietpi.

thank you, i tried updating unbound on orangepi with

sudo apt upgrade unbound

, but it says i already have the latest unbound liao. (1.17.1-2+deb12u4). Probably, i have updated it liao.

 

[Jurong640]

, but it says i already have the latest unbound liao. (1.17.1-2+deb12u4). Probably, i have updated it liao.

Went to check google gemini, here is what they advised:

1. Why apt upgrade says you are up to date​

Debian (and by extension Armbian) does not follow a "rolling release" model for system software.

• The Upstream vs. Debian Version: NLnet Labs continuously releases new features and major version numbers (e.g., 1.22, 1.24, 1.26). Debian 12, however, freezes its core packages at a specific release—in this case, 1.17.1—to guarantee absolute system stability.
• The Meaning of +deb12u4: The suffix +deb12u4 indicates Debian 12, Update 4.
• Backporting Security Fixes: When NLnet Labs announces a critical CVE, the Debian Security Team does not update your system to 1.26.x (which could introduce breaking configuration changes). Instead, they take the specific security patch, backport it into 1.17.1, and release it as a minor revision (such as +deb12u5).

Because NLnet Labs’ latest advisories are very recent, the Debian package maintainers are in the process of compiling and testing backported builds for Debian 12. As soon as that build passes testing, it will appear via standard apt updates.

---

i think i should wait for Debian

 

[sacar101]

Have to wait for them to backport if that's the case.

You can easily check the latest unbound version for each Debian version here.

https://packages.debian.org/search?keywords=unbound