Update

settings.conf

@@ -69,6 +69,10 @@ instances:
   module:   shellprocess
   config:   shellprocess_install_intel_drivers_chrooted.conf
 
+#  - shellprocess@generate_dnscrypt_cert_dont_chroot
+- id:       generate_dnscrypt_cert_dont_chroot
+  module:   shellprocess
+  config:   shellprocess_generate_dnscrypt_cert_dont_chroot.conf
 
 sequence:
 - show:
@@ -103,6 +107,7 @@ sequence:
   - grubcfg
   - bootloader
   - services-systemd
+  - shellprocess@generate_dnscrypt_cert_dont_chroot
   - shellprocess@copy_refind_theme_chrooted
   - shellprocess@install_intel_drivers_chrooted
   - shellprocess@remove_unneeded_nvidia_and_virt_machine_and_packages_chrooted

settings_offline.conf

@@ -69,6 +69,10 @@ instances:
   module:   shellprocess
   config:   shellprocess_install_intel_drivers_chrooted.conf
 
+#  - shellprocess@generate_dnscrypt_cert_dont_chroot
+- id:       generate_dnscrypt_cert_dont_chroot
+  module:   shellprocess
+  config:   shellprocess_generate_dnscrypt_cert_dont_chroot.conf
 
 sequence:
 - show:
@@ -103,6 +107,7 @@ sequence:
   - grubcfg
   - bootloader
   - services-systemd
+  - shellprocess@generate_dnscrypt_cert_dont_chroot
   - shellprocess@copy_refind_theme_chrooted
   - shellprocess@install_intel_drivers_chrooted
   - shellprocess@remove_unneeded_nvidia_and_virt_machine_and_packages_chrooted

settings_online.conf

@@ -70,6 +70,10 @@ instances:
   module:   shellprocess
   config:   shellprocess_install_intel_drivers_chrooted.conf
 
+#  - shellprocess@generate_dnscrypt_cert_dont_chroot
+- id:       generate_dnscrypt_cert_dont_chroot
+  module:   shellprocess
+  config:   shellprocess_generate_dnscrypt_cert_dont_chroot.conf
 
 sequence:
 - show:
@@ -105,6 +109,7 @@ sequence:
   - grubcfg
   - bootloader
   - services-systemd
+  - shellprocess@generate_dnscrypt_cert_dont_chroot
   - shellprocess@copy_refind_theme_chrooted
   - shellprocess@install_nvidia_drivers_chrooted
   - shellprocess@install_intel_drivers_chrooted

src/modules/shellprocess/shellprocess_generate_dnscrypt_cert_dont_chroot.conf

@@ -0,0 +1,17 @@
+# SPDX-FileCopyrightText: no
+# SPDX-License-Identifier: CC0-1.0
+
+---
+
+i18n:
+  name: "Generate dnscrypt cert"
+  name[ru]: "Создание сертификата для dnscrypt"
+
+dontChroot: true
+
+timeout: 180
+
+script:
+  - "-mkdir -p ${ROOT}/var/lib/dnscrypt-proxy"
+  - '-openssl req -x509 -verbose -batch -subj "/C=/ST=/L=$City/O=/OU=/CN=/emailAddress=" -nodes -newkey rsa:2048 -days 5000 -sha256 -keyout /tmp/localhost.pem -out /tmp/localhost.pem'
+  - "-cp -vf /tmp/localhost.pem ${ROOT}/var/lib/dnscrypt-proxy/localhost.pem"