pi-hole

Update docker.io/pihole/pihole Docker tag to v2025

Michi Kofler-Häusler

16 Mar 2025 — 16 min read

On all three nodes I upgraded Pi-hole successfully by means of fully automated Watchtower Docker container update with dependency update facilitated by Mend's Renovate Bot.

This MR contains the following updates:

Package	Update	Change
docker.io/pihole/pihole	major	`2024.07.0` -> `2025.03.0`

Release Notes

pi-hole/docker-pi-hole (docker.io/pihole/pihole)

`v2025.03.0`

Compare Source

This tag should fix issues seen on some Synology devices with older kernels - if you were previously running the special :synology-crash tag, you may now switch back to mainline releases.

What's Changed (Docker Specific)

Reintroduce missed docker secret handling (Redo) by @PromoFaux in https://github.com/pi-hole/docker-pi-hole/pull/1750
WEBPASSWORD_FILE is mounted to /run/secrets by @yubiuser in https://github.com/pi-hole/docker-pi-hole/pull/1758
Honor configured DNS port for docker health check by @yubiuser in https://github.com/pi-hole/docker-pi-hole/pull/1746
Add NTP port to docker compose example & Dockerfile by @casperklein in https://github.com/pi-hole/docker-pi-hole/pull/1768
Update test docker container to Alpine 3.21 and docker_cli 28.0.0. by @yubiuser in https://github.com/pi-hole/docker-pi-hole/pull/1760

Full Changelog: https://github.com/pi-hole/docker-pi-hole/compare/2025.02.7...2025.03.0

This release also incorporates changes from the core components

What's Changed (FTL 6.0.4)

Add webhome validator by @DL6ER in https://github.com/pi-hole/FTL/pull/2276
Also validate env variables by @DL6ER in https://github.com/pi-hole/FTL/pull/2294
Prevent crash on failure to source secure randomness by @DL6ER in https://github.com/pi-hole/FTL/pull/2300
Update embedded CivetWeb by @DL6ER in https://github.com/pi-hole/FTL/pull/2312
Change default value of webserver.threads to 50 by @DL6ER in https://github.com/pi-hole/FTL/pull/2305
Avoid CivetWeb crash if no optional port could be bound by @DL6ER in https://github.com/pi-hole/FTL/pull/2313
Empty DHCP range is valid by @DL6ER in https://github.com/pi-hole/FTL/pull/2314
Undo optimization attempts for sqlite3 by @DL6ER in https://github.com/pi-hole/FTL/pull/2321
Fix first-time IPv6 client name resolution by @DL6ER in https://github.com/pi-hole/FTL/pull/2310
Fix API_EXCLUDE_DOMAINS migration by @DL6ER in https://github.com/pi-hole/FTL/pull/2311
Update embedded dnsmasq by @DL6ER in https://github.com/pi-hole/FTL/pull/2323
Tweak misc.etc_dnsmasq_d help text and scope - only read *.conf files by @DL6ER in https://github.com/pi-hole/FTL/pull/2309
Increase niceness of CivetWeb threads by @DL6ER in https://github.com/pi-hole/FTL/pull/2326

Full Changelog: https://github.com/pi-hole/FTL/compare/v6.0.3...v6.0.4

What's Changed (Web 6.0.2

Accept tabs inside dns.hosts and strip possible trailing comments by @DL6ER in https://github.com/pi-hole/web/pull/3241
Regenerate package-lock.json with npm 10.8.2 by @XhmikosR in https://github.com/pi-hole/web/pull/3247
Improve image compression by @XhmikosR in https://github.com/pi-hole/web/pull/3244
Improve info text on Settings > DNS by @yubiuser in https://github.com/pi-hole/web/pull/3245
Save the state of the query log table infinitely by @yubiuser in https://github.com/pi-hole/web/pull/3253
Update hammer.min.js and include map by @yubiuser in https://github.com/pi-hole/web/pull/3254
Remove the hard-coded time range from graphic titles by @rdwebdesign in https://github.com/pi-hole/web/pull/3256
Softens the insecure warning on the HTTP login page a bit by @yubiuser in https://github.com/pi-hole/web/pull/3258
Show the interface name in Settings > DNS page by @rdwebdesign in https://github.com/pi-hole/web/pull/3265
Add a hidden column to the network table to allow filtering by hostnames by @rdwebdesign in https://github.com/pi-hole/web/pull/3264
Fix total query tooltip on dahboard by @yubiuser in https://github.com/pi-hole/web/pull/3266
Fix the insertion of multiple domains as wildcard by @rdwebdesign in https://github.com/pi-hole/web/pull/3259
Use margin-right instead of spaces after dnssec icon in Query Log by @rdwebdesign in https://github.com/pi-hole/web/pull/3267
Improve memory unit selection for devices with less than 1 GB of RAM by @DL6ER in https://github.com/pi-hole/web/pull/3270
Use singular if we have one core by @XhmikosR in https://github.com/pi-hole/web/pull/3276

Full Changelog: https://github.com/pi-hole/web/compare/v6.0.1...v6.0.2

What's Changed (Core 6.0.5)

If there are no files to change, don't print an error by @yubiuser in https://github.com/pi-hole/pi-hole/pull/5953
Improve dig error handlin in api.sh by @yubiuser in https://github.com/pi-hole/pi-hole/pull/5965
Add missing trailing / when setting permissions of /etc/pihole by @yubiuser in https://github.com/pi-hole/pi-hole/pull/5997
Update README.md - Fix Text+URL for allowlisting/denylisting by @jeroenhabets in https://github.com/pi-hole/pi-hole/pull/5993
Do not hide error messages when dealing with services by @MichaIng in https://github.com/pi-hole/pi-hole/pull/5983
Do not overwrite TLS cert/key mode by @MichaIng in https://github.com/pi-hole/pi-hole/pull/5998
Remove 'reconfigure' option by @yubiuser in https://github.com/pi-hole/pi-hole/pull/5887
Removing kernel check based on discussion in Pi-Hole MR #5957. by @UltChowsk in https://github.com/pi-hole/pi-hole/pull/6020
Improve update/fresh install detection by @PromoFaux in https://github.com/pi-hole/pi-hole/pull/6034
Fix find command syntax, remove log dir from search by @jacklul in https://github.com/pi-hole/pi-hole/pull/6035
Fix gravity.sh -- Alpine / Docker specific issue by @karolkania in https://github.com/pi-hole/pi-hole/pull/6030
Pi-hole Core v6.0.5 by @PromoFaux in https://github.com/pi-hole/pi-hole/pull/6042

New Contributors

@jeroenhabets made their first contribution in https://github.com/pi-hole/pi-hole/pull/5993
@UltChowsk made their first contribution in https://github.com/pi-hole/pi-hole/pull/6020
@karolkania made their first contribution in https://github.com/pi-hole/pi-hole/pull/6030

Full Changelog: https://github.com/pi-hole/pi-hole/compare/v6.0.4...v6.0.5

`v2025.02.7`

Compare Source

What's Changed (Docker Specific)

Include FTLCONF_dns_listeningMode: 'all' in the compose example file by @yubiuser in https://github.com/pi-hole/docker-pi-hole/pull/1741

Full Changelog: https://github.com/pi-hole/docker-pi-hole/compare/2025.02.3...2025.02.7

What's Changed (FTL 6.0.3)

Do not try to migrate setupVars.conf if it does not exist. by @DL6ER in https://github.com/pi-hole/FTL/pull/2238
Fix CLI command for non-local API configuration by @DL6ER in https://github.com/pi-hole/FTL/pull/2233
Clarify the role of dns.domain outside of the DHCP context by @DL6ER in https://github.com/pi-hole/FTL/pull/2239
Reduce log level for web requests by @bennettmsherman in https://github.com/pi-hole/FTL/pull/2244
Improve secure randomness generation by @DL6ER in https://github.com/pi-hole/FTL/pull/2240
Fix typo in dns.showDNSSEC text description by @DL6ER in https://github.com/pi-hole/FTL/pull/2246
Allow tabs in dns.hosts by @DL6ER in https://github.com/pi-hole/FTL/pull/2247
Also make optional in the setupVars.conf migration process by @DL6ER in https://github.com/pi-hole/FTL/pull/2248
Tweak CHAOS TXT local.api.ftl by @DL6ER in https://github.com/pi-hole/FTL/pull/2254
Make additional_headers configurable by @DL6ER in https://github.com/pi-hole/FTL/pull/2236
Fix DNS_BOGUS_PRIV and QUERY_LOGGING migration by @MichaIng in https://github.com/pi-hole/FTL/pull/2264
Rate-limit internal NTP server by @DL6ER in https://github.com/pi-hole/FTL/pull/2258
Prevent duplicated entries on successive v5 Teleporter importing by @DL6ER in https://github.com/pi-hole/FTL/pull/2265
Update config/env.c to accept conventional environment variables in a… by @iain-henderson in https://github.com/pi-hole/FTL/pull/2256
We should not send any content for HTTP codes 1xx, 204 and 304 by @DL6ER in https://github.com/pi-hole/FTL/pull/2272
Fix DHCP_LEASETIME migration by @DL6ER in https://github.com/pi-hole/FTL/pull/2271
Print values of env vars if they are invalid by @DL6ER in https://github.com/pi-hole/FTL/pull/2273
Fix webserver.api.maxHistory usage in API by @DL6ER in https://github.com/pi-hole/FTL/pull/2275
Fix typo in dns option descriptions by @rrobgill in https://github.com/pi-hole/FTL/pull/2280
Follow-up on #2275 by @DL6ER in https://github.com/pi-hole/FTL/pull/2285
Restart FTL on change of webserver.threads by @DL6ER in https://github.com/pi-hole/FTL/pull/2295
Fix off-by-one in wildcard SAN checking by @DL6ER in https://github.com/pi-hole/FTL/pull/2293
Fix status codes and response messages for PUT in API docs by @tsutsu3 in https://github.com/pi-hole/FTL/pull/2291
Pi-hole FTL v6.0.3 by @DL6ER in https://github.com/pi-hole/FTL/pull/2296

New Contributors

@bennettmsherman made their first contribution in https://github.com/pi-hole/FTL/pull/2244
@iain-henderson made their first contribution in https://github.com/pi-hole/FTL/pull/2256
@tsutsu3 made their first contribution in https://github.com/pi-hole/FTL/pull/2291

Full Changelog: https://github.com/pi-hole/FTL/compare/v6.0.2...v6.0.3

`v2025.02.6`

Compare Source

Now that PADD v4.0.0 has been released, we can include it in the docker image:

What's Changed? (PADD)

Make PADD compatible with Pi-hole v6 (https://github.com/pi-hole/PADD/pull/247) + a lot of smaller associated MRs
Exit bump workflow early if latest tag is empty (https://github.com/pi-hole/PADD/pull/394)
Only exit for small screen sizes during startup (https://github.com/pi-hole/PADD/pull/423)
Move wiki to readme (https://github.com/pi-hole/PADD/pull/419)
CI Dependency updates

New Contributors

@mwoolweaver made their first contribution in https://github.com/pi-hole/PADD/pull/413

Full Changelog: https://github.com/pi-hole/PADD/compare/v3.11.1...v4.0.0

Nothing massively relvant to docker image - tagging to keep up to date with latest core release, which does include one change that will reflect an output message if pihole checkout is run on docker.

What's Changed

Don't set a random password on v5 -> v6 updates by @yubiuser in https://github.com/pi-hole/pi-hole/pull/5960
Only run migration code if setupVars.conf exists. by @PromoFaux in https://github.com/pi-hole/pi-hole/pull/5969
Fix dnsmasq v5 to v6 config migration by @MichaIng in https://github.com/pi-hole/pi-hole/pull/5968
Assure that Lighttpd conf-enabled symlink is removed by @MichaIng in https://github.com/pi-hole/pi-hole/pull/5974
Print a more helpful message on pihole checkout in docker containers by @DL6ER in https://github.com/pi-hole/pi-hole/pull/5963

Full Changelog: https://github.com/pi-hole/pi-hole/compare/v6.0.3...v6.0.4

`v2025.02.4`

Compare Source

No Docker specific changes in this image - tagged to include the latest FTL hotfix

What's Changed (FTL v6.0.2)

Fix possible problems with case-encode bigmap array allocation. by @DL6ER in https://github.com/pi-hole/FTL/pull/2230
Update embedded dnsmasq to 2.91rc5 by @DL6ER in https://github.com/pi-hole/FTL/pull/2241
Improve dnsmasq syntax check edge case by @DL6ER in https://github.com/pi-hole/FTL/pull/2231
Increase compatibility with volumes on network shares by @DL6ER in https://github.com/pi-hole/FTL/pull/2218
Make in revServer really optional by @DL6ER in https://github.com/pi-hole/FTL/pull/2237

Full Changelog: https://github.com/pi-hole/FTL/compare/v6.0.1...v6.0.2

`v2025.02.3`

Compare Source

Small release to address #1723

What's Changed

Add test to output FTL's version information by @yubiuser in https://github.com/pi-hole/docker-pi-hole/pull/1700
Re-expose ports 53/67/80/443 by @PromoFaux in https://github.com/pi-hole/docker-pi-hole/pull/1730

Full Changelog: https://github.com/pi-hole/docker-pi-hole/compare/2025.02.1...2025.02.3

`v2025.02.2`

Compare Source

A couple of updates to the Readme, plus some hotfixes from the main components

What's Changed (Docker Specific)

Add note about FTLCONF_misc_etc_dnsmasq_d by @yubiuser in https://github.com/pi-hole/docker-pi-hole/pull/1719
Amend README to include PADD branch in custom build steps by @yubiuser in https://github.com/pi-hole/docker-pi-hole/pull/1720
Improve default docker compose file to include SYS_TIME and SYS_NICE by @yubiuser in https://github.com/pi-hole/docker-pi-hole/pull/1727

Full Changelog: https://github.com/pi-hole/docker-pi-hole/compare/2025.02.1...2025.02.2

What's Changed (FTL)

Allow default GH token to write content in the build script by @yubiuser in https://github.com/pi-hole/FTL/pull/2200
Fix parsing of envvars with more than one = by @DL6ER in https://github.com/pi-hole/FTL/pull/2204
Modify teleporter zip verification by @DL6ER in https://github.com/pi-hole/FTL/pull/2198
Fix legacy parsing of DEBUG_ALL option by @DL6ER in https://github.com/pi-hole/FTL/pull/2205
Add dependabot for npm by @yubiuser in https://github.com/pi-hole/FTL/pull/2196
Do not redirect to login page for ACME challenges by @DL6ER in https://github.com/pi-hole/FTL/pull/2207
Rearrange webserver.port default value by @DL6ER in https://github.com/pi-hole/FTL/pull/2220

Full Changelog: https://github.com/pi-hole/FTL/compare/v6.0...v6.0.1

Small tweak to the previous tag to grab the correctly tagged version of the pihole-FTL binary. This was a cosmetic bug only, there are no functional differences between this tag and 2025.02.0