{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreic5dgacfrext2vldg57aikmlhavnrllwi6jdtijw2nqumcoqzoyd4",
    "uri": "at://did:plc:46ti67tc37qcmwp2vaynk6fq/app.bsky.feed.post/3mgx7wescjyw2"
  },
  "path": "/blog/posts/misc_ech_enabled_curl_oci_image/",
  "publishedAt": "2026-03-13T15:24:55.879Z",
  "site": "http://sven.stormbind.net",
  "tags": [
    "https://gitlab.com/hoexter-experiments/ech",
    "README"
  ],
  "textContent": "As an opportunity to rewire my brain from \"docker\" to \"podman\" and \"buildah\" I started to create an image build with an ECH enabled curl at https://gitlab.com/hoexter-experiments/ech.\n\nNot sure if it helps anyone, but setup should be like this:\n\n\n    git clone https://gitlab.com/hoexter-experiments/ech\n    cd ech\n    buildah build --layers -f Dockerfile -t echtest\n    podman run -ti echtest /usr/local/bin/curl \\\n      --ech true --doh-url https://one.one.one.one/dns-query \\\n      https://crypto.cloudflare.com/cdn-cgi/trace.cgi\n    fl=48f121\n    h=crypto.cloudflare.com\n    ip=2.205.251.187\n    ts=1773410985.168\n    visit_scheme=https\n    uag=curl/8.19.0\n    colo=DUS\n    sliver=none\n    http=http/2\n    loc=DE\n    tls=TLSv1.3\n    sni=encrypted\n    warp=off\n    gateway=off\n    rbi=off\n    kex=X25519\n\n\nIt also builds nginx and you can use that for a local test within the image. More details in the README.",
  "title": "Sven Hoexter: container image with ECH enabled curl",
  "updatedAt": "2026-03-13T14:16:02.000Z"
}