AdGuardHome [RELEASE] Asuswrt-Merlin-AdGuardHome-Installer (AMAGHI)

[xzm1006]

It is not that I wouldn't support it if I could, the problem is that I don't know when I am going to add a setting for the intended audience (the router mode users) that would other wise break or mangle the configuration of having it on an access point.

It would be nice if the Router or AP option could be added to the script in the future

Might be troublesome. Just a suggestion.

 

[SomeWhereOverTheRainBow]

It would be nice if the Router or AP option could be added to the script in the future

Might be troublesome. Just a suggestion.

I am considering it, It would have to be plain vanilla setup. Void of any pesky router mode requirements.

 

[unknownz]

Yea that is a kink with using amtm to update. I need to work it out with @thelonelycoder . It would be nice if amtm fetched a new installer when it detects an update for it.

Currently the only way to do that is to use the installer link on the first page. At some point here soon I will put a update function that is specific to the installer.

I actually used the u - check for script updates option in amtm first and amtm also reported a new version was detected before entering the AdGuardHome installer. Recall also in the installer, it also indicated that there is a new version to be installed.

Have been doing the updates through amtm using this method all this while and seems to be ok

 

[Jack Yaz]

v1.1.1 is released.
The changes include the addition of timezone selection. During install/update process. (run option 1). You will only be asked 1 time to do this.
Sorry the list of timezones is 424 long, but at least it is hot and entware fresh off the opkg press.
View attachment 38985

use the column package from entware

 

[Jack Yaz]

Just a comment on the Github commits, its near impossible to follow the changes as every commit is "Update installer" with no explanatory text

 

[Jack Yaz]

Just to share that is hasn't happened for a few days now. It seems to have done this while I was configuring it and was getting some errors with unbound not configured properly. I have a theory that it was related to a number of devices hammering on DNS.

But being a very important service, it would be great if there was some restart protection just in case.

Thanks.

i did give this project a spin, but my router was clearly showing the strain. i broke out an old Pi2 I had sitting around, threw Docker on it and the Adguard Home container and no blips since. I suspect its fine on beefier routers than my AC86U (which admittedly has had its fair share of development torture) but I needed something stable, especially for a core service like DNS. (this does mean I no longer use Diversion/uiDivStats on my primary router, but I'm not abandoning the uiDivStats project!)

 

[SomeWhereOverTheRainBow]

Just a comment on the Github commits, its near impossible to follow the changes as every commit is "Update installer" with no explanatory text

Here is an easy way to see the commits

Comparing v1.1.0...v1.1.1 · jumpsmm7/Asuswrt-Merlin-AdGuardHome-Installer

The Official Installer of AdGuardHome for Asuswrt-Merlin - Comparing v1.1.0...v1.1.1 · jumpsmm7/Asuswrt-Merlin-AdGuardHome-Installer

github.com

Here's the difference since v1.0.0

Comparing v1.0.0...v1.1.1 · jumpsmm7/Asuswrt-Merlin-AdGuardHome-Installer

The Official Installer of AdGuardHome for Asuswrt-Merlin - Comparing v1.0.0...v1.1.1 · jumpsmm7/Asuswrt-Merlin-AdGuardHome-Installer

github.com

 

[SomeWhereOverTheRainBow]

i did give this project a spin, but my router was clearly showing the strain. i broke out an old Pi2 I had sitting around, threw Docker on it and the Adguard Home container and no blips since. I suspect its fine on beefier routers than my AC86U (which admittedly has had its fair share of development torture) but I needed something stable, especially for a core service like DNS. (this does mean I no longer use Diversion/uiDivStats on my primary router, but I'm not abandoning the uiDivStats project!)

Yea I ran it on an RTac68u just to see how it would handle. It ran fine with all the jack collectibles I had. Minus uidivstats and diversion.

 

[juched]

Noticed two small issues:

1. I had an original S61 init.d file. The script seems to create a the new S99 version (with cru for restart) but then overwrites S61 (old content) during upgrade. Didn't validate S99 new was created, but had to install twice to get the correct S99 file.

2. during second install was the first time it asked for timezone... Then i saw two "bad number" errors.

Note, I updatd via amtm... so perhaps my first install was running the old script.. but it did create an S99 init.d, but wihtout the cru commands to create cron jobs.

 

[SomeWhereOverTheRainBow]

Noticed two small issues:

1. I had an original S61 init.d file. The script seems to create a the new S99 version (with cru for restart) but then overwrites S61 (old content) during upgrade. Didn't validate S99 new was created, but had to install twice to get the correct S99 file.

2. during second install was the first time it asked for timezone... Then i saw two "bad number" errors.

View attachment 38991


Note, I updatd via amtm... so perhaps my first install was running the old script.. but it did create an S99 init.d, but wihtout the cru commands to create cron jobs.

Yes the issue is that you need to use the download link on the first post because I have not incorporated an auto fetch for a new version yet, but the proper installer deletes the S61

 

[SomeWhereOverTheRainBow]

Noticed two small issues:

1. I had an original S61 init.d file. The script seems to create a the new S99 version (with cru for restart) but then overwrites S61 (old content) during upgrade. Didn't validate S99 new was created, but had to install twice to get the correct S99 file.

2. during second install was the first time it asked for timezone... Then i saw two "bad number" errors.

View attachment 38991


Note, I updatd via amtm... so perhaps my first install was running the old script.. but it did create an S99 init.d, but wihtout the cru commands to create cron jobs.

The proper installer creates every thing you need.

 

[SomeWhereOverTheRainBow]

I'm been messing around with Adguard, it seems pretty good, I've had diversion for many years and wanted to switch to adguard. Anyways, I was wondering:
- What is the difference beween the Release version and the Edge version?
- Is there a way to have an "auto-refresh" on the query log section?

Both the edge and beta get updated nightly with no real version check. If you are on release branch the installer will inform you of new versions, otherwise edge and beta can be updated any time. But from my understanding, each build has its own dedicated releases. The only build the installer detects changes for is the release build though. Keep that in mind when amtm tells you there is a new version when you are on a beta or edge build.

Release is the stable build.
Beta is the about to be stable build.
Edge is like using the Master Branch on github because it gets the nightly build updates straight from master.

 

[SomeWhereOverTheRainBow]

Noticed two small issues:

1. I had an original S61 init.d file. The script seems to create a the new S99 version (with cru for restart) but then overwrites S61 (old content) during upgrade. Didn't validate S99 new was created, but had to install twice to get the correct S99 file.

2. during second install was the first time it asked for timezone... Then i saw two "bad number" errors.

View attachment 38991


Note, I updatd via amtm... so perhaps my first install was running the old script.. but it did create an S99 init.d, but wihtout the cru commands to create cron jobs.

Providing a hotfix, please use the download link below:

curl -L -s -k -O https://raw.githubusercontent.com/jumpsmm7/Asuswrt-Merlin-AdGuardHome-Installer/master/installer && sh installer ; rm installer

And run option 1

Change-log:

Comparing v1.1.1...master · jumpsmm7/Asuswrt-Merlin-AdGuardHome-Installer

The Official Installer of AdGuardHome for Asuswrt-Merlin - Comparing v1.1.1...master · jumpsmm7/Asuswrt-Merlin-AdGuardHome-Installer

github.com

This resolves all future amtm updates using installer selected from amtm menu, or using the above link.

 

[SomeWhereOverTheRainBow]

use the column package from entware

Now it is at 603. At first, I wasn't parsing the full database. I have never messed with column before, I will have to take a look at some example use cases.

Release v1.1.2

Changelog:

Comparing v1.1.1...v1.1.2 · jumpsmm7/Asuswrt-Merlin-AdGuardHome-Installer

The Official Installer of AdGuardHome for Asuswrt-Merlin - Comparing v1.1.1...v1.1.2 · jumpsmm7/Asuswrt-Merlin-AdGuardHome-Installer

github.com

• Fix a persistent stalling when install tries to stop AdGuardHome
• Add an ability to freshly auto-launch install process after updating installer
• Extend to full ENTWARE TZ-database

 

[thelonelycoder]

i did give this project a spin, but my router was clearly showing the strain. i broke out an old Pi2 I had sitting around, threw Docker on it and the Adguard Home container and no blips since. I suspect its fine on beefier routers than my AC86U (which admittedly has had its fair share of development torture) but I needed something stable, especially for a core service like DNS. (this does mean I no longer use Diversion/uiDivStats on my primary router, but I'm not abandoning the uiDivStats project!)

 

[Jack Yaz]

Part of the problems could be dnsmasq in 386.4, I've had no end of problems with DNS and DHCP from it, which sadly persisted across a factory reset. I spotted its being downgraded in the next Merlin, so perhaps I'll be back!

 

[thelonelycoder]

Part of the problems could be dnsmasq in 386.4, I've had no end of problems with DNS and DHCP from it, which sadly persisted across a factory reset. I spotted its being downgraded in the next Merlin, so perhaps I'll be back!

In Relation with Diversion with your 86U? Mine throws no errors.

 

[Jack Yaz]

In Relation with Diversion with your 86U? Mine throws no errors.

Not Diversion related no, purely dnsmasq.

 

[SomeWhereOverTheRainBow]

Not Diversion related no, purely dnsmasq.

It is related purely to dnsmasq and dnssec on dnsmasq from my understanding. Users that disabled this option lessen or had no more issues. Did you try that? My dnssec is disabled until the next release. I am hoping the next version of dnsmasq is out of beta before then because they already have a fix for the issue.

 

[Viktor Jaep]

Thank you for the great work on this, @SomeWhereOverTheRainBow! I got this installed last night on my AC86U, upgraded to the latest version this morning, wanted to ask a few questions, and pass along a few observations of before/after?

First off... I previously had my router setup to utilize Quad9's DoT service... and that seemed to be working quite well. After getting AGH installed, I noticed it made a few changes to my setup, and wanted to make sure that this is by design, and is configured this way so that AGH works properly?

First off, it seems it changed my DNS Privacy Protocol to "None"... Before it had "DoT" selected. But now there's a new message underneath stating that the DNSFilter is now enabled.

So, under LAN->DNS Filter, it switched the DNSFilter to "ON", as it was previously off... and the only selection present is "Router"

Not being familiar with how these settings behave in conjunction with AGH, is this all correct to allow AGH to continue using DoT? This is what I currently have in my upstream settings, utilizing the "Parallel Requests" option:

[/router.asus.com/]192.168.1.1:553
[/www.asusnetwork.net/]192.168.1.1:553
[/www.asusrouter.com/]192.168.1.1:553
[/use-application-dns.net/]192.168.1.1:553
[/dns.resolver.arpa/]192.168.1.1:553
[/lan/]192.168.1.1:553
[//]192.168.1.1:553
tls://dns-family.adguard.com
tls://dns.quad9.net
tls://security.cloudflare-dns.com
https://doh.opendns.com/dns-query

The thing that worries me is that the [//]192.168.1.1:553 would seem to be able to bypass the requirement to use TLS and hit the plain DNS servers setup under the WAN DNS section? Isn't that a catch-all?

When looking at the log, all my entries say "Type A, Plain DNS"... which concerns me as well. Would it still say "Plain DNS" if TLS is working, or would it say "TLS DNS"? Just not sure what this means.

Also, is there any way to test or validate that outgoing DNS requests from AGH are going over TLS?

From a performance aspect, I noticed some strange entries under %VSZ... is 200.7% of virtual memory an expected figure?

From a load aspect, it runs pretty lean... but did notice a loss of available RAM... probably between 50-75MB. I'll keep my eye on this to see if it settles more over time.

Appreciate your hard work, your lightning-fast support, fixes and updates for everyone using your AGH implementation! Thanks in advance for your feedback on this above!