From c7b5da98f4255c5f9cb6fa2cfe7db96ec0a0d91a Mon Sep 17 00:00:00 2001 From: Crimson Date: Tue, 12 May 2026 21:12:15 +0500 Subject: [PATCH] =?UTF-8?q?=D0=94=D0=BE=D0=BA=D1=83=D0=BC=D0=B5=D0=BD?= =?UTF-8?q?=D1=82=D0=B0=D1=86=D0=B8=D1=8F=20DNS:=20=D0=B4=D0=B8=D0=BD?= =?UTF-8?q?=D0=B0=D0=BC=D0=B8=D1=87=D0=B5=D1=81=D0=BA=D0=B8=D0=B9=20deep-c?= =?UTF-8?q?heck=20=D0=B8=20=D1=83=D1=82=D0=BE=D1=87=D0=BD=D0=B5=D0=BD?= =?UTF-8?q?=D0=B8=D0=B5=20=D0=BA=D1=80=D0=B8=D1=82=D0=B5=D1=80=D0=B8=D0=B5?= =?UTF-8?q?=D0=B2?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- docs/ACCEPTANCE_CHECKLIST.md | 2 +- docs/INSTALLATION.md | 4 +++- docs/PRODUCTION_EXAMPLE.md | 2 +- 3 files changed, 5 insertions(+), 3 deletions(-) diff --git a/docs/ACCEPTANCE_CHECKLIST.md b/docs/ACCEPTANCE_CHECKLIST.md index 5c92366..b8403d7 100644 --- a/docs/ACCEPTANCE_CHECKLIST.md +++ b/docs/ACCEPTANCE_CHECKLIST.md @@ -150,7 +150,7 @@ - [ ] Контейнер `amnezia-dns` в состоянии healthy. - [ ] `docker inspect amnezia-dns` показывает `"53/tcp":null` и `"53/udp":null`. - [ ] `amnezia-dns` и `amnezia-awg2` подключены к одной Amnezia DNS Docker-сети. -- [ ] Публичный DNS-запрос к `:53` не получает ответа. +- [ ] Публичный DNS-запрос к `:53` не резолвит домены; допустимы `connection refused`, `timeout` или `no servers could be reached`. - [ ] DNS-резолвинг у VPN-клиента работает при активном подключении. - [ ] AWG2 host firewall не открывает `53/tcp` и `53/udp`. diff --git a/docs/INSTALLATION.md b/docs/INSTALLATION.md index 664c098..b62cb55 100644 --- a/docs/INSTALLATION.md +++ b/docs/INSTALLATION.md @@ -189,12 +189,14 @@ Optional deep-check DNS path (если нужна углублённая про ```bash apt install -y dnsutils +DNS_IP="$(docker inspect -f '{{range $n,$v := .NetworkSettings.Networks}}{{if $v.IPAddress}}{{println $v.IPAddress}}{{end}}{{end}}' amnezia-dns | head -n1)" DNS_PID="$(docker inspect -f '{{.State.Pid}}' amnezia-dns)" AWG_PID="$(docker inspect -f '{{.State.Pid}}' amnezia-awg2)" +echo "DNS_IP=$DNS_IP" nsenter -t "$DNS_PID" -n ss -lntup nsenter -t "$AWG_PID" -n ip route -nsenter -t "$AWG_PID" -n dig @172.29.172.254 example.com A +short +nsenter -t "$AWG_PID" -n dig @"$DNS_IP" example.com A +short ``` ## C. Transfer artifacts diff --git a/docs/PRODUCTION_EXAMPLE.md b/docs/PRODUCTION_EXAMPLE.md index 15d9ae0..8e36bd9 100644 --- a/docs/PRODUCTION_EXAMPLE.md +++ b/docs/PRODUCTION_EXAMPLE.md @@ -17,7 +17,7 @@ Amnezia: AmneziaDNS: container: amnezia-dns status: healthy - internal_ip: 172.29.172.254 + internal_ip: 172.29.172.254 # example value; verify with docker inspect exposed_ports: 53/tcp, 53/udp inside Docker only published_ports: none public_53: closed