Step 2: Install Squid 7 with HTTPS Decryption

Default version of Squid in Ubuntu 26.04 LTS repository is quite old, so we will use newer version of Squid recompiled as indicated in article How to Build Squid 7 in Ubuntu 26.04.

Navigate to core sub folder and run script 02_squid.sh.

#!/bin/bash

# all packages are installed as root
if [[ $EUID -ne 0 ]]; then
   echo "This script must be run as root" 1>&2
   exit 1
fi

# get diladele apt key, dearmor it and add to trusted storage
curl https://www.diladele.com/pkg/diladele_pub.asc | gpg --dearmor >/etc/apt/trusted.gpg.d/diladele_pub.asc.gpg

# add new repo
echo "deb https://diladele.github.io/repo-squid-7_6_2-ubuntu-26_04/repo/ubuntu/ resolute main" \
   >/etc/apt/sources.list.d/squid-7_6_2.diladele.github.io.list

# and install
apt update && apt install -y squid-openssl

# create the override folder for squid
mkdir -p /etc/systemd/system/squid.service.d/

# and override the default number of file descriptors
cat >/etc/systemd/system/squid.service.d/override.conf << EOL
[Service]
LimitNOFILE=65535
EOL

# finally reload the systemd
systemctl daemon-reload