# wget/git clone the dnscrypt source.
# Build on normal machine.
env GOOS=netbsd GOARCH=arm GOARM=5 go build -mod vendor -ldflags="-s -w"

# copy to pi
scp dnscrypt-proxy pi:.

# create a configuration file
<create config> 

# [optional - this will need to be done once and for a fresh install of NetBSD]
PKG_PATH="http://cdn.NetBSD.org/pub/pkgsrc/packages/$(uname -s)/$(uname -m)/$(uname -r|cut -f '1 2' -d.)/All/"
export PKG_PATH

# install the rootcerts
pkg_add mozilla-rootcerts

# install them
mozilla-rootcerts install

# done.