diff --git a/docs/ACCEPTANCE_CHECKLIST.md b/docs/ACCEPTANCE_CHECKLIST.md index 5c92366..b8403d7 100644 --- a/docs/ACCEPTANCE_CHECKLIST.md +++ b/docs/ACCEPTANCE_CHECKLIST.md @@ -150,7 +150,7 @@ - [ ] Контейнер `amnezia-dns` в состоянии healthy. - [ ] `docker inspect amnezia-dns` показывает `"53/tcp":null` и `"53/udp":null`. - [ ] `amnezia-dns` и `amnezia-awg2` подключены к одной Amnezia DNS Docker-сети. -- [ ] Публичный DNS-запрос к `:53` не получает ответа. +- [ ] Публичный DNS-запрос к `:53` не резолвит домены; допустимы `connection refused`, `timeout` или `no servers could be reached`. - [ ] DNS-резолвинг у VPN-клиента работает при активном подключении. - [ ] AWG2 host firewall не открывает `53/tcp` и `53/udp`. diff --git a/docs/INSTALLATION.md b/docs/INSTALLATION.md index 664c098..b62cb55 100644 --- a/docs/INSTALLATION.md +++ b/docs/INSTALLATION.md @@ -189,12 +189,14 @@ Optional deep-check DNS path (если нужна углублённая про ```bash apt install -y dnsutils +DNS_IP="$(docker inspect -f '{{range $n,$v := .NetworkSettings.Networks}}{{if $v.IPAddress}}{{println $v.IPAddress}}{{end}}{{end}}' amnezia-dns | head -n1)" DNS_PID="$(docker inspect -f '{{.State.Pid}}' amnezia-dns)" AWG_PID="$(docker inspect -f '{{.State.Pid}}' amnezia-awg2)" +echo "DNS_IP=$DNS_IP" nsenter -t "$DNS_PID" -n ss -lntup nsenter -t "$AWG_PID" -n ip route -nsenter -t "$AWG_PID" -n dig @172.29.172.254 example.com A +short +nsenter -t "$AWG_PID" -n dig @"$DNS_IP" example.com A +short ``` ## C. Transfer artifacts diff --git a/docs/PRODUCTION_EXAMPLE.md b/docs/PRODUCTION_EXAMPLE.md index 15d9ae0..8e36bd9 100644 --- a/docs/PRODUCTION_EXAMPLE.md +++ b/docs/PRODUCTION_EXAMPLE.md @@ -17,7 +17,7 @@ Amnezia: AmneziaDNS: container: amnezia-dns status: healthy - internal_ip: 172.29.172.254 + internal_ip: 172.29.172.254 # example value; verify with docker inspect exposed_ports: 53/tcp, 53/udp inside Docker only published_ports: none public_53: closed