Skip to content

v15.2.4 - Install internet protection (defer DNS lock until dnscrypt healthy)

Choose a tag to compare

View all tags
@ryderlacin-pixel ryderlacin-pixel released this 08 Jun 18:07
· 10 commits to main since this release
v15.2.4
53d599f

v15.2.4 — Install internet protection (DNS defer)

Status: Production — fixes recurring "internet dies during install".

Problem

During STEP 18 (privacy stack), install could:

  1. Set WireGuard DNS = 127.0.0.1 before dnscrypt-proxy listened on port 53
  2. Run dns-lockdown / dnscrypt guards while install lock was active
  3. Leave the system with broken DNS → no internet every install attempt

Common on VMs when port 53 is busy or dnscrypt service is still starting.

Fix

  • dnscrypt-guard (v14 + v15): Test-DnscryptListening gate — no WG DNS change unless 127.0.0.1:53 is LISTENING
  • Set-WireGuardDnsLocalhost: only runs when Test-DnscryptHealthy
  • Privacy guards deferred during InstallInProgress (STEP 18c–18f write scripts only)
  • STEP 20: Invoke-DeferredPrivacyGuards applies DNS lock only after install lock cleared + dnscrypt healthy

Install

Download v15.2.4 ZIP or:

git pull
.\emergency-reset.bat   # if internet currently broken
.\install.ps1 -NoPause

Tests

scripts/test-suite.ps1: 202+ PASS

Assets 2
Loading