r2dh/dnstt repository overview

A docker image for dnstt-server (https://www.bamsoftware.com/software/dnstt/⁠).

I have only tested this on podman rootless; docker might need some tweaks to run as non-root.

First to generate server keys:

podman run --rm -v /tmp:/tmp docker.io/r2dh/dnstt -gen-key -privkey-file /tmp/server.key -pubkey-file /tmp/server.pub

then move the server private key to your storage, and you can run dnstt-server with the following:

podman run -v /path/to/server.key:/data/server.key -udp 0.0.0.0:53 -privkey-file /data/server.key t.yourdomain.net 127.0.0.1:1080

Per the author you'll need a proxy for dnstt to have as exit, thus 127.0.0.1:1080 here. If you run podman rootless like I do, you'll need to have dnstt-server listen to unprivileged port, then use some firewall quirks to redirect the traffic.