Pi-hole v6.1.4: Advanced DNS Sinkhole

Looking for a comprehensive setup guide?
Check out TimInTech/Pi-hole-Unbound-PiAlert-Setup for a step-by-step guide to setting up Pi-hole with Unbound (for DNS over TLS) and PiAlert (for monitoring and alerts).

---

🚀 What's New in v6.1.4 (August 2025)

🔧 Critical Fixes

• Gravity Update Fix
  Resolved crashes during pihole -g caused by empty shell variables when fetching blocklists
• Permission Enforcement
  Requires privileged status (root/sudo) for password changes and critical commands
• FTL Installation Safety
  Aborts installation if FTL binaries fail to download
• Query Functionality Restored
  Fixed domain query (pihole -q) failures

🐋 Docker Improvements

• Image 2025.08.0 includes:
  • Fixed Gravity execution via web interface
  • Resolved API compatibility issues
  • Enhanced container stability

---

🧠 Intelligent Filtering Engine

# Example: Custom regex for social media blocking
pihole -regex '(^|\.)(tiktok|instagram|snapchat)\.(com|net)$'

• Context-Aware Blocking
  Granular control via regex 2.0 engine with negative lookaheads
• Dynamic Gravity Sync
  70% faster blocklist updates than v5
• ARM64 Optimization
  3x faster DNSSEC validation on Raspberry Pi 4

---

🛠️ Installation and Configuration

Raspberry Pi Installation

# Update system
sudo apt update && sudo apt upgrade -y

# Install Pi-hole
curl -sSL https://install.pi-hole.net | bash

# Set static IP (in /etc/dhcpcd.conf)
interface eth0
static ip_address=192.168.1.100/24
static routers=192.168.1.1
static domain_name_servers=192.168.1.1

Docker Installation

# Create persistent directories
mkdir -p ~/pihole/{etc-pihole,etc-dnsmasq.d}

# Run container
docker run -d --name pihole \
  -p 53:53/tcp -p 53:53/udp \
  -p 80:80 \
  -e TZ="America/New_York" \
  -e WEBPASSWORD="your_secure_password" \
  -v ~/pihole/etc-pihole:/etc/pihole \
  -v ~/pihole/etc-dnsmasq.d:/etc/dnsmasq.d \
  --dns=127.0.0.1 --dns=1.1.1.1 \
  --restart=unless-stopped \
  pihole/pihole:2025.08.0

⚠️ Upgrade Notes

1. Backup First

   pihole -a teleporter

2. Fix DNS Resolution Issues
   Temporarily set /etc/resolv.conf to 1.1.1.1
3. Resolve Port Conflicts
   Disable other DNS services (especially on Synology NAS)

---

🛠️ Troubleshooting v6.1.4

Common Issues & Solutions

Issue	Solution
FTL Upgrade Failure	Use temporary external DNS
Port 53 Conflict	Disable other DNS services
NTP Binding Error	Disable NTP sync in settings
Permission Errors	Run commands with sudo

Diagnostic Commands

# Check service status
pihole status

# Test DNS resolution
dig @127.0.0.1 pi-hole.net

# View live logs
pihole -t

---

🔒 Security Enhancements

• REST API - Replaces Lighttpd/PHP stack
• TOML Configuration - Centralized settings at /etc/pihole/pihole.toml
• HTTPS Support - Auto-generated or custom certificates
• JWT Authentication - Secure API access

# API Authentication Example
curl -X POST https://pi.hole/admin/api/auth/login \
  -d '{"password":"your_web_password"}'

---

📊 Performance Benchmarks

Metric	v5.8.2	v6.1.4	Improvement
Concurrent Queries	15k	48k	3.2×
Memory Usage	82MB	55MB	33% ↓
Blocklist Reload	8.2s	1.8s	78% ↓
API Response	220ms	32ms	6.9×

---

🔗 Recommended Resources

• Official Documentation
• v6 Migration Guide
• GitHub Repository
• Release Notes

Hardware Recommendation:
Raspberry Pi 4 8GB Kit + NVMe SSD via USB 3.0

Optimized modular architecture of Pi-hole v6.1.4