a docker container which runs the cloudflared proxy-dns at port 5054 based on alpine with some parameters to enable DNS over HTTPS proxy for pi-hole based on tutorials from Oliver Hough and Scott Helme
$ docker run --name cloudflared --rm --net host visibilityspots/cloudflared:latest
$ docker-compose up
$ docker run --name cloudflared --rm --net host -e UPSTREAM1=https://dns.google/dns-query visibilityspots/cloudflared:latest
$ docker run --name cloudflared --rm --net host -e PORT=5053 visibilityspots/cloudflared:latest
$ docker run --name cloudflared --rm --net host -e ADDRESS=:: visibilityspots/cloudflared:latest
$ docker run --name cloudflared --rm --net host -e MAX_UPSTREAM_CONNS=5 visibilityspots/cloudflared:latest
$ dig +short @10.0.0.2 -p 5054 visibilityspots.org
13.225.238.129
13.225.238.53
13.225.238.9
13.225.238.61
Build against pinned upstream release
$ docker build -t visibilityspots/cloudflared:latest .
Build against a specific upstream release
$ docker build -t visibilityspots/cloudflared:latest . --build-arg UPSTREAM_RELEASE_TAG=2021.5.10
$ docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
$ docker buildx build -t visibilityspots/cloudflared:latest --platform linux/amd64,linux/arm/v6,linux/arm/v7 --push .
I wrote some tests in a goss.yaml file which can be executed by dgoss to test the created image
$ dgoss run --name cloudflared --rm -ti visibilityspots/cloudflared:latest
INFO: Starting docker container
INFO: Container ID: 792bc39d
INFO: Sleeping for 0.2
INFO: Container health
INFO: Running Tests
User: cloudflared: exists: matches expectation: true
Process: cloudflared: running: matches expectation: true
Command: uname -a: exit-status: matches expectation: 0
Command: cloudflared --version: exit-status: matches expectation: 0
Command: cloudflared --version: stdout: matches expectation: ["cloudflared version 2023.8.2 (built September 2023)"]
Package: ca-certificates: installed: matches expectation: true
DNS: visibilityspots.org: resolvable: matches expectation: true
Total Duration: 0.092s
Count: 7, Failed: 0, Skipped: 0
INFO: Deleting container
using act for local testing of the written github actions makes my life and commit history a lot easier;
$ act -l
Stage Job ID Job name Workflow name Workflow file Events
0 test test CI main.yaml push
1 buildx buildx CI main.yaml push
$ act -j test
[CI/test] 🚀 Start image=catthehacker/ubuntu:act-latest
.
.
.
[CI/test] ✅ Success - Main Execute Goss tests
[CI/test] 🏁 Job succeeded
Distributed under the MIT license