STOP Unwanted ads on your MikroTik with Pihole!
Vložit
- čas přidán 24. 07. 2024
- Hello friends, in this video I will be redoing my video on installing a pihole container as MikroTik has made syntax changes to how things like environment variables work. This video will focus primarily on setting up a pihole docker container. For more information please see the top pinned comment to additional reference material.
❗Help the channel grow by subscribing if you aren't subscribed already! A like is also very appreciated and feel free to leave a comment about what you liked or disliked in the video and what else you would like to see from me :) 👊❗
Details about the video:
Timestamps:
📕00:00 - Introduction
📕01:13 - Site without pihole
📕03:30 - Verify container viability
📕05:03 - Configure container network
📕07:12 - Configure pihole container
📕15:52 - Accessing & Configuring pihole
📕19:13 - Site with pihole
Support the Channel:
⭐Become a Patreon: / thenetworkberg
⭐Become a CZcams Member: / @thenetworkberg
Social Media:
🌏 / thenetworkberg
🌏 / bergnetwork
🌏 / the-network-berg-39451...
MTCRE Playlist:
• Free MTCRE RoSv6
MTCNA Playlist:
• Free MTCNA RoSv6
Thanks again for watching
Just some reference material, please watch my previous video on when I configured a Unifi Controller container on MikroTik for more information on general setup.
UBNT controller video:
czcams.com/video/2Rq1Dnj2p8E/video.html
Pihole docs:
docs.pi-hole.net/
Container docs:
cloud.google.com/learn/what-are-containers#:~:text=Containers%20are%20packages%20of%20software,on%20a%20developer's%20personal%20laptop.
MikroTik container docs:
help.mikrotik.com/docs/display/ROS/Container
Any chance of you doing a follow up video on the unifi controller showing how to update the controller software? Great content man!!
It's nice to see South Africa content for a change.
Agreed
This is great thank you! I still remember having people hook up a raspberry pi to the usb of a mikrotik to get pihole working. Absolutely great. I bought a mikrotik about 12 months ago to get going on networking. You have made the learning curve so much easier.
Finally with winbox 😅 so easy to follow 😂🙏 thank you so much! Really appreciate.
Since RouterOS ver7.8, because of the changes made in the USB management, instead of disk1, I recommend using usb1-part1.
I've just configured it on my hAP ac3 - works great! Thanks!
Sweet man!! this is awesome. I have also configure mine to be a recursive DNS Server as well. one less device on my network.
I go to do this in my own time and you made a video about it. Pretty epic sir.
Epic indeed ^^!
Very cool, and thankyou for all the great videos, 👍🏼 great job 👍🏼
Thanks for watching!
Thanks for your tutorial. Please, can you make a little update with support for stubby, unbound or any combination with DoH (ie NextDNS)? Somehow, I cannot set it properly on MikroTik, even externally on RPi (not container). Thanks for consideration!
As usual, amazing videos man ! Can we install Portainer in a docker container to manage the other containers ? Or am I asking something silly ? Management of everything from the command line is fine, but being able to use a web interface to manage containers would be amazing. If possible, I think this would make great add on video to this. Additionally adding some explaination of how to add unbound functionality as that is a typical add on for a pihole setup.
Love Your Work !!!😀😀😀
Subsequently, a video on how to run expressVPN in a container and route your traffic through that on MikroTik would be super helpful too. Currently no Lightway support in Mikrotik and some countries block a lot of the other protocols... especially Egypt. I'm trying to help someone beat the 'great firewall' using express VPN so that all his house traffic will run throught express VPN and not be seen by the government.
Thank you, it works, unfortunately is not too fast (on my RB4011). Adguard with docker installed on RP4 is noticeably faster.
The ultimate for me would be the ability to run Avahi or other mdns repeater as a container on the MikroTik. There are a lot of installs I have done where we had to install a raspberry pi running Avahi just so we could use the MikroTik rather than *sense.
👍worked instantly as per ur guidance ....one little question about ssh to container? how do i ssh to pihole container? ssh is not responding!!😑
Great video. Thanks a lot!
Glad you liked it!
nice explanation have a nice day
Sempre bom navegar com segurança!
Great video at all. may i ask you something? can i install pihole to my LHG LTE18 kit?
Greetings. I noticed that your router handles an 8G memory. Can you explain in a video how you did that please? Thank you.
Thank you
Hello Network Berg, Thank you very much for your tutorials. Since the PiHole container does not run after every router restart and therefore the DNS resolution does not work either, could you do a tutorial on how to write a script that is executed after the router restart and thus starts the PiHole container? Thank you and best regards
I'll see if I can make a video going over how to use scheduler with scripts to achieve this.
Hi. Thanks for this useful guide. I do everything the same way as you show in the video guide. But I have a problem. I have no response to ping 10.0.0.2 (time in the video 6m 50sec). Could you guide me what the problem is? Thank you very much in advance and best regards.
Very helpful, thank you! I have Pi-hole running smoothly now on my RB5009. Any chance you could describe how to pull the latest version to update the Pi-hole? Maybe do another pull (e.g. /container/add remote-image=pihole/pihole:latest interface=veth1 root-dir=disk1/pihole mounts=dnsmasq_pihole,etc_pihole envlist=pihole_envs ) followed by a reset?
I think I just figured it out. Super easy. I simply stopped and removed the old container ( /container/remove number=### ) and ran another /container/add remote-image=... which pulled the latest version. Configuration and settings were all on disk1 so everything carried over. Pretty simple!
Hi, Can you perhaps have a look at Adguard Home in a Mikrotik Container?
I will definitely look at this :)
you should set the environment within the pihole folder like so disk2/pihole/etc and disk2/pihole/dnsmasq.d
This is amazing! I had been asking if there was such a way to even have containers on a mikrotik router and only heard silence. You made a video about it which there are far few quality videos such as this.
I did run into an issue starting the container. Had to use container/start 0 Hopefully this helps those out who are just getting started on mikrotik. Although the configured IP for pihole 10.0.0.2 returns 403 Forbidden. Currently my mikrotik is pointing to a raspberry pi as it's dns but can't find the setting to change this. It was about a year or so ago. Mikrotik has been a learning curve but with some auto start containers and scripts I could see it as a power house.
With the current container it no longer prompts you to the admin page, you need to type in /admin to log into pihole. ie 10.0.0.2/admin. Also MikroTik does support AutoStart you can either tick the option inside the container from Winbox or you can use the set command in the CLI:
[admin@MikroTik] > container/set start-on-boot=yes 0
Hope this helps you, and enjoy the containers on MikroTik!
@@TheNetworkBerg Thanks a lot for that! I actually just discovered that by reading some patch notes. Ended up going through a lot of your videos as I wiped my mikrotik with netinstall as I think it caused some issues when I did a standard update with an outdated routerOS. On the current 7.8 stable and love it! A quick suggestion, a video you could do next could be about the CAPsMAN. There aren't many quality videos regarding that and guys like me with multiple Mikrotik AP's would love it.
Nice update!
As a microtic noob allow me to ask: the vETH I can also put on my normal LAN bridge or?
So the container would have an IP from my normal LAN.
I suppose you could add the VETH into the same bridge as your physical LAN ports, however, you will still need to manually configure the address and gateway on the interface.
When we will be able to use this versions for production/stable ?
How about unbound dns resolver in a docker? 🤔
i have Mikrotik RB750GR3 Gigabit Router, how can i use adguardor pihole
Fantastic video! Can you also make a tutorial video for install the Nextcloud image on Mikrotik router?
I can take a look sure
@@TheNetworkBerg Nice!
Mr. Berg I got my CHR running on VitualBox through network bridge adapter mode and my laptop and CHR are conected to a physical mikrotik router. I installed pihole succesfuly on my CHR, but I can't acces the admin page through https, whenever I try it shows me a Welcome page lighttpd. Also whenever I ping the veth1 (where my container is located) from my physical router I get no response. What should I do?
I have a pihole installed on an RPI and it goes through mikrotik hex s router. When I check pihole I only have one client showing, the routers ip address, any idea what I can do so that it shows all the client that access the pihole?
Thanks
How do you perform port mapping? I'm trying to run unbound as the upstream DNS server for PiHole to use but that's also defaulting to port 53 and I want to remap it to port 5053 so that it doesn't run into a conflict. Documentation on Container usage with ROS seems to be lacking and asking the forums seems to get replies like "use the search button". Would you use a different VETH for each container?
I use cloud flares family safe dns server, can I configure pihole to route through that?
running on issue where i can't force Pihole DNS.
I was using OpenDNS and it was working perfectly fine with same NAT rules
You set the subnet /24, so the reason is assign an ip address to each one. If that's true, why you need to use the gateway to access the containers, and not the container ip or a host URL? My question is about two container using the same port (80 for instance), How can you identify each container using NAT?
Thank you for the video, and sorry for my english 👏
how can i shell into the docker from MT?
hello i am kinda lost where is 8:32 container/config/export. I havent dont that part and cannot proceed. Could you give me some xtra instructions there. Thank you.
rOS 7.15.1 - followed instructions until 6:50 mark, but unable to ping the 10.0.0.2 address (while 10.0.0.1 works). I'm wondering if they changed something else again. Nevertheless, once the container was started, it became pingable!
Thank you for your help about it. How can update pihole in the future?
As things stand you need to remove the old container and add a new pihole container.
Lekker man... Lekker. Kyk hoe klap die Suid Afrikaner CZcams! Wel gedaan!!
Hi TNB. Can I run OPENWRT on MikroTik on container?
I would prefer if the DNS Server from Mikrotik would be good enough to handle big blocklists. I would love to do this native and ditch my pihole.
Just imagine how nice it would have been if they had just supported docker compose yaml...
Great video -- and great channel (I've just subscribed).
I have an RB4011 which should be suitable for this. But I also have a fairly powerful QNAP NAS on my network, with fully supported container capability. Is there any reason why I couldn't/shouldn't run pihole in a container on the NAS rather than on the Mikrotik router?
mean, is there an advantage to running it on the router (being "first in line" on my network), or a reason why it wouldn't work on the NAS?
Thanks for subbing, to be honest if you have the hardware ie extra servers or a NAS that can do containers then I would probably install the containers on there. It's just "nice" to be able to do this on a router, especially for people that may not have extra hardware.
@@TheNetworkBerg Thanks for the quick reply. I'd actually started through the process of installing adguard on my RB4011 (per your other excellent YT vid about that pihole alternative) -- until I reached the point of configuring the temp directory for the container to do its docker image pull into, and then realizing (duh!) that the RB4011 lacks a USB port. No way to add an external drive.
Even though the internal drive has about 400MB free, I don't think I want my container (or adguard or pihole) frequently writing to it. It's implemented as a NAND flash drive, which would likely have a greatly shortened life with lots of writes to it. 😞
And then I also started looking into mounting a network share for the container to use. But it seems that RouterOS doesn't support that. Very surprising ... and dang!
So then I started looking into what Mikrotik routers DO provide a USB port for adding an external drive. In the "reasonably affordable" space, I found only the RB3011. It has a USB 3.0 port but in some other respects seems like a downgrade for my RB4011 .... as well as being a bunch more money.
And then your reply arrived. :-) So ya, it seems that I could install adguard or pihole in a container on my NAS. The minimal traffic to the adblock/pihold DNS on the NAS would be fine. But I see that adguard also supports network filtering, which would require a round trip from the router to the NAS and back for every part of every HTTP(S) request. I'm worried about the slowdown that would cause. And so I'm leaning back towards implementing it in the router.
So now I'll shuddup and think more about this before jumping in. One final question I have is: what Mikrotik router model are YOU running in this setup, if you don't mind me asking?
Nice video, however... two weeks later containters are still not working well, that's why the feature was removed from the stable 7.4 release.
I also saw that Containers are not added in the stable release of 7.4 which is understandable, you can still use v7.4rc2 with container functionality though. Pi-Hole works just fine on it and has working for me since the reintroduction of containers on MikroTik. I do hope MikroTik expands on containers though and allows for stuff like docker-compose, but yeah it seems like one big issue is the security flaws that having containers can potentially bring, so I wouldn't be completely surprised if MT just drops the feature completely.
Great video, got my Mikrotik 5009 set up and running PiHole on a 32GB usb flash drive, managed to add a few adlists and ran Gravity updates. Any chance of a scheduler script set up to automatically restart the container and PiHole after a reboot?
You can definitely use the scheduler with a script to automatically start the container after a reboot. I am going to make a video going over scheduler again and will use containers as examples. Though the script is actually very straight forward. You just create a new scheduler script and set the event to "On-Startup" This will run exactly 3 seconds after the ROS boots then you can just issue the /container/start/0 (Or whatever line item your container is) script. Can add multiple containers by just adding a :delay function in the script or create separate scripts for each container.
i think this will be supported in 7.6 as i saw on the changelogs
This is probably a stupid question but I am trying to mock this up in my eve-ng lab before I buy a 5009 or something to actually use it on and I am stuck in this setup process of the container because my chr in eve shows no disk....how did you get around this? I tried to add a disk from terminal in winbox but I hit a wall there too. Following your instructions I am able to create directories that show up under the "files" but I have no disks. I am also assuming this is why the container pihole installation is stuck on error. I am running ROS v7.7 on the eve node. Thanks for any help, you honestly put out the best MikroTik content I have ever seen and I have been using this stuff since the early 2000s.
Not a stupid question at all, my recommendation is to just install an x86 instance on your Hypervisor. You can download the ISO directly from the MikroTik software tab. Managing disks from there is really straightforward and this is how my container lab is setup.
@@TheNetworkBerg sorry I messaged you on Reddit I didn’t see this, but eve gives instructions on how to add MikroTik chr but not x86 so I guess I’ll have to figure that out, thanks!
hello, i have a big problem, when i add container, after extracting i'm getting error : error getting layer: remote disconnected while in HTTP exchange and was unable to import, container 09ac1630-401f-436a-9a01-e7ba361045bf, i have hap ac2, with 7,7 beta 8
Dose PI hole blocked CZcams ads too?
Thanks for useful information
To some degree yes, things like bumper ads get blocked, although with the default configuration I have seen an ad still play in the video where you can click skip ad. Reading up about it you can possibly tweak pihole to block those instances of ads too
How do you connect to pinhole using ssh? I have been unsuccessful doing so and wanted to update it to the latest version. 😎
Just stop the container, remove the image and download again, this is the process to update container.
Example (after remove the actual container): /container/add remote-image=pihole/pihole:latest interface=Docker root-dir=disk1/pihole mounts=dnsmasq_pihole,etc_pihole envlist=pihole_envs
Is there any hope for mipsbe processor of RB2011UiAS-2HnD or way around?
Unfortunately not
I was enable to complete all the instalation, but when I will acess the page of the pihole. I receive an error (forbbiden).
There has been some changes to the container I think you can access it by just adding /admin at the end of the VETH address
Hi,
I've just wanted to try your recommended guide but I ended up with an error which I cannot find any helpful information about what could be wrong.
My device is: MikroTik hAP ac3
Architecture: arm
Packages versions: 7.7
I use external USB stick (8GB) for the storage for the container.
I pretty much followed all of your steps, the only difference is that I used the USB stick as the 'src' and 'mount'
The log from this is:
container,info,debug getting layer sha256:330ad28688ae3fa5f3b241fef3efd076299bec9874e0597b1c16dcf8a165a53d
container,info,debug layer sha256:330ad28688ae3fa5f3b241fef3efd076299bec9874e0597b1c16dcf8a165a53d downloaded
container,info,debug failed to extract layer
container,info,debug was unable to import, container 54752d2d-d6ad-4b91-b99d-c1c60d3cdf2d
Could you please help me understand what could I done wrong?
Thank you so much in advance.
When I issue:
[admin@MikroTik] /container> /container/add remote-image=pihole/pihole:lastest interface=veth1 root-dir=disk2/pihole mounts=etc_
pihole,dnsmasq_pihole envlist=envs_pihol
I get the following error:
input does not match any value of volumes
What did I do wrong?
Thanks!
Nevermind -- I had a typo. Thank you!
Hi! Do you have some idea what the minimum viable device for running these are? Do you think a hAP ac3 could pass muster? It's arm but not arm64. Probably an ax3 would be much better, based on the specs, but these are in short supply right now. ED: Both are rather RAM limited so maybe stick to RB4xxx or 5xxx and higher?
I would definitely recommend at least an RB3011, though RB4011 & RB5009 would definitely make a bigger difference.... In theory the hAP ac3 should be able to run containers, though I don't see you running any big containers or multiple ones, but you might be able to slip by using just pi-hole or adguard. Test it out and see?
@@TheNetworkBerg I've got it running on a hAP ac^2
@@Graes0ns I have trouble when trying to pull image , hap ac 2 not enough space
@@vuhuy8952 try using firmware 7.6 & use a usb dongle if possible for storage
thk u :)
Hello,
Could you help me, running the mikrotik "container mode" on a virtual Mikrotik (ESX)? After the reboot or power off/on, the "container = yes" is not set at "system/device-mode/print". Any Idea?
Thanks, Tom
Hmmmm I had similar issues on Workstation Pro, what I ended up doing was hard powering off the VM in the Hypervisor instead of using the system reboot/shutdown commands from the terminal of the MikroTik. This was able to resolve my issue with getting the device in container mode, hopefully this helps you too.
@@TheNetworkBerg Thanks, after several reboots with several methods, the container mode is enabled and is working now fine. Have a nice day/week.
@@TheNetworkBerg I had the same issue! Upon your comment I've opened the task administrator and killed the VMware VMX running process, after that when chr vm was started, the chr's routeros was still in container mode! Take 5!!! ;)
can you create a video of mikrotik CHR + Pihole + vpn L2tp server
How do I set it up when I just like to run the docker in same bridge (lan) as the ether1 interface. I tried to add ether1 and veth1 in same bridge. DHCP client added to bridge (get lan IP) added a fixed lan IP to veth1. But not able to ping IP on veth1.
I have not tried configuring a container in this manner, just remember that the logical side of the Veth and how it breaks out is all done inside the interface configuration. IP Addressing & Gateway specifically, have you set those settings to be in the same range as your LAN and are you using the Bridge IP of your LAN as the gateway?
@@TheNetworkBerg Gateway is the lan gw. Reason for doing this is that the test router is not the default gw, so I do not like to add a new route to my main router. Will try to investigate some. Also it was not easy to see what was the disk name on an vmware x86 mikrotik, but found under system/disk that the name was primary-slave, not disk1 etc.
How much resources does this one use? Can you run it on mikrotik rb4011?
pihole should in theory run just fine on an rb4011,I know some of my viewers have this running on an rb5009 as well. Resource usage is between 111Mb - 125Mb Memory in my instances.
How can I do it to restart the pihole, my MikroTik restarts and stays on stop
/container/set start-on-boot=yes 0 (zero it's an example of the container number you want to start with the Mikrotik)
like it
If possible try to use pihole in routerboard. Using vm you have a good amount of resources, is not fair. I say that because a entry level routeboard with arm processor is a hAP ac² (128MB ram) or hAP ac³(256MB ram) with USB to use a pendrive as external disk, maybe these are not enough to run pihole in network with 10~15 clients.
I don't think using pihole on a VM is unfair, I would actually encourage using a VM or a CCR2k. Pihole itself isn't too resource intensive, I think I am using roughly 112Mb of memory, but yes if your routerboard doesn't have sufficient resources it will pose problems with running containers, especially some of the bigger ones like a Unifi Controller. So I probably would not recommend running containers on hAP devices, an RB5009 should be a very good starting point.
Absolutely loved the video! Also from South Africa too! I have to try this out and hopefully implement it in my home network so i can use my Raspberry pi for an 3cx SBC instead...
Just got it running on HAP ac3, adding 512mb usb flash, format to ext4 as instructions in video, still have lot's of CPU and ram resources. Working like charm, Big Thanks! to Network Berg. One thing I have to figure out is to auto start it with router reboot.
I've run PiHole the last 7 days on hAP ac² with USB thumb drive and RM5+ blocklists sites. All 100% with around 10 devices. Only problem is startup after loadshedding, Waiting for the scheduler video to implement auto star on reboot. Dankie The Network Berg
@@PetrusRademeyer check out this video ^^
czcams.com/video/mjLEMexz6_0/video.html
Could the mikrotik 750gr3 installs it?
Unfortunately not, it is not ARM or ARM64 architecture
@@TheNetworkBerg thanks!!!
Apparently I cant even install pihole on the hap ax2 since 90MiB is not enough for it to even download...and I dont see any external storage capabilities - sad
Yeah that's the main reason I went for the ax3 since it has a USB port to connect an external drive for stuff like containers.
@@TheNetworkBerg Its kind of way too large for me to be honest- especially with the antennas
dose this work on hAP lite TC
Unfortunately not, ARM / ARM64 is required for containers the hAP lite TC is SMIPS architecture, so will not work :(
what is the cheapest mikrotik router you can recommend that this will work on
Container file ????
You download that from Docker Hub. Or you can download locally then just upload to MikroTik on its filesystem.
You missed a key item, what to do if you can't get a ping working in the initial phase. Took me a while and a lot of search to figure out the firewall issues. Otherwise a good tutorial
I was excited then I found out my hex POE doesn't support containers :(
I watched the video for learning purposes only because sadly my Hex S (MMIPS) doesn't support containers
Awww sorry Marco :(
@@TheNetworkBerg awesome video btw. Thanks for investing your time teaching us
Can i use pihole to block pornsite?
Yes, just add the domain you what to block (in Domains) or a list of sites you want to block (in Adlists).
Hi,
First of all, thanks for the tutorial, now i'm running Pi-hole on my RB3011UiAS thanks to you.
I'm trying to create an script to delete the current image and download a new one, but the command /container remove number=0 don't work (this proccess is after the command /container/stop number=0 and delay 15s).
Executing /container remove number=0 via MikroTik terminal, works without problem... I haved tryed only the command /container remove number=0 in script (to see if it will work only with this process) and no good, so the problem is with this command and now I'm thinking:
"It's a problem with scripts on version 7.6?
User problem (it's admin), or it's because DNSMASQ_USER is seted with root user?
P.S: All process described here were made with Winbox and RouterOS version 7.6
Can you please help me on this?
Thanks in advance
Dangerous
pihole is plain awful. No idea why people use it. Even uBlock does much better work.
Hi TNB. I have problem with password. WEBPASSWORD does not work. How can I change it or find out current random password? RB3011UiAS with 7.5
Just stop the container, go in Container - Envs and change the value on WEBPASSWORD, after that, start the container and try to login.