starred/unbound-docker
1
0
Fork 0
mirror of https://github.com/klutchell/unbound-docker.git synced 2026-10-21 00:03:16 +00:00
Code Issues Packages Projects Releases Wiki Activity
874 Commits 13 Branches 43 Tags
kyle/drill-wrapper
Commit Graph
71 Commits
Author SHA1 Message Date
Kyle Harding d27fba6382 Add rust wrapper for drill to always exit 0 or 1 
Docker healthchecks expect processes to exit with 0 or 1,
the other exit codes are reserved.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2024-10-11 14:18:04 -04:00
Kyle Harding 771cfd31f1 Update Unbound to 1.21.1 
This security release fixes CVE-2024-8508.

See https://github.com/NLnetLabs/unbound/releases/tag/release-1.21.1
Signed-off-by: Kyle Harding <kyle@balena.io>
 2024-10-03 14:06:44 -04:00
Kyle Harding 58319e144e Add pre-commit hooks 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2024-10-02 15:06:29 -04:00
Ingmar Stein ff98f54056 Enable support for DNS-over-HTTPS 
Unbound needs to be compiled with libnghttp2 in order to provide DNS-over-HTTPS:
https://github.com/NLnetLabs/unbound/blob/5e9b6296b7ab586eaa956f21b98c574967ceb06e/doc/unbound.conf.5.in#L583-L584
 2024-09-18 14:54:46 -04:00
Ingmar Stein 1fa70580bf Update ldns to 1.8.4 
Changelog: https://raw.githubusercontent.com/NLnetLabs/ldns/develop/Changelog
 2024-09-18 09:06:51 -04:00
Ingmar Stein dad916da1f Enable TCP Fast Open 
Unbound supports the TCP Fast Open feature [0] which can be enabled at build time with:

--enable-tfo-client
--enable-tfo-server

TFO is generally considered as worthwhile feature and doesn't require
any additional dependencies.

[0] https://lwn.net/Articles/508865/
 2024-09-16 16:25:17 +02:00
Renovate Bot c2205177ec Update docker/dockerfile Docker tag to v1.10 2024-09-16 13:40:06 +00:00
Renovate Bot a5ee5a3345 Update alpine Docker tag to v3.20.3 2024-09-09 14:06:50 +00:00
Kyle Harding be53628a89 Update to Unbound 1.21.0 
This release has a fix for the CAMP and CacheFlush issues. They have a
low severity for Unbound, since it does not affect Unbound so much.

See: https://github.com/NLnetLabs/unbound/releases/tag/release-1.21.0
Signed-off-by: Kyle Harding <kyle@balena.io>
 2024-08-15 08:47:30 -04:00
Renovate Bot 213260e793 Update alpine Docker tag to v3.20.2 2024-07-29 13:36:33 +00:00
Renovate Bot 88bfc89b24 Update docker/dockerfile Docker tag to v1.9 2024-07-15 13:36:52 +00:00
Kyle Harding f533951b54 Download root hints and generate root key at build time 
There is no need for these to be included with the
source and it just adds a manual step to be considered.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2024-06-26 08:49:18 -04:00
Renovate Bot 4c03ec11f8 Update alpine Docker tag to v3.20.1 2024-06-24 14:08:05 +00:00
Renovate Bot 864aa64989 Update all digest updates 2024-06-24 13:38:27 +00:00
Renovate Bot ed4904bf32 Update docker/dockerfile Docker tag to v1.8 2024-06-17 13:11:08 +00:00
Renovate Bot f43bba0dec Update alpine Docker tag 2024-05-27 14:08:32 +00:00
churchofnoise d1cb135e72 Update Dockerfile 
Update to Unbound 1.20.0
 2024-05-08 11:20:18 +02:00
Renovate Bot ddc825db85 Update docker/dockerfile:1.7 Docker digest to a57df69 2024-04-26 13:29:24 +00:00
hugochc 2523e14500 Fix Dockerfile identation 2024-04-01 09:23:07 -04:00
hugochc 4e0f8832c8 Fix Cache DB module compile option 2024-04-01 09:23:07 -04:00
hugochc 2352252072 Fix identation in Dockerfile 2024-03-15 10:25:13 -03:00
hugochc 956cbf117d Added option to enable CacheDB Module with Redis backend. 
How to use:
The Cache DB module must be configured in the (unbound.conf) module-config: directive, e.g.: module-config: "validator cachedb iterator"

Additionally, must be created cachedb.conf file under custom.conf.d directory with Redis credentials.
 2024-03-15 09:19:21 -03:00
churchofnoise df7d37322f Update Dockerfile 2024-03-14 15:03:52 +01:00
churchofnoise 721c1c8018 Update Dockerfile 2024-03-07 12:32:01 +01:00
Renovate Bot 994c6cc740 Update docker/dockerfile Docker tag to v1.7 2024-03-05 22:08:22 +00:00
Kyle Harding 83577cb114 Update Unbound to 1.19.1 
This security release fixes two DNSSEC validation vulnerabilities:
CVE-2023-50387 (referred here as the KeyTrap vulnerability) and
CVE-2023-50868 (referred here as the NSEC3 vulnerability).

See: https://github.com/NLnetLabs/unbound/releases/tag/release-1.19.1
Signed-off-by: Kyle Harding <kyle@balena.io>
 2024-02-13 08:38:50 -05:00
Renovate Bot f1a41b7a6e Update alpine Docker tag to v3.19.1 2024-01-27 00:50:32 +00:00
Kyle Harding 4ff7a02ae5 Use loose matching for some library version files 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-12-18 09:04:37 -05:00
Renovate Bot 462ce796c9 Update alpine Docker tag 2023-12-18 12:44:43 +00:00
Renovate Bot f70972b87b Update alpine:3.18.5 Docker digest to 34871e7 2023-12-01 02:42:00 +00:00
Renovate Bot e46e2bf89b Update alpine Docker tag to v3.18.5 2023-12-01 00:11:20 +00:00
Kyle Harding fbfe18dcca Change unbound user to a system user with nologin 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-11-16 10:57:49 -05:00
Kyle Harding 6c0709eecb Update steps to generate root.hints and root.key 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-11-15 09:11:00 -05:00
Kyle Harding 2a791bd918 BREAKING: Move runtime chroot directory to /var/unbound 
This will make it easier to override configuration files in /etc/unbound
without having to provide custom root hints.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-11-14 19:10:40 -05:00
Kyle Harding 87faa6a18b Fix permissions of /etc in final image 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-11-14 19:08:43 -05:00
Renovate Bot 40078af727 Update docker/dockerfile Docker tag to v1.6 2023-11-10 20:35:43 +00:00
Kyle Harding 8e92b4cf7e Update Unbound to 1.19.0 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-11-08 09:25:32 -05:00
Renovate Bot 561599e00b Update alpine Docker tag to v3.18.4 2023-09-28 22:37:05 +00:00
Kyle Harding 39b4f6c02b Commit example configuration file for reference 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-08-30 10:04:36 -04:00
Kyle Harding c7c4ca4ae8 Update to Unbound release 1.18.0 
https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-18-0

Resolves: https://github.com/klutchell/unbound-docker/issues/175
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-08-30 10:04:35 -04:00
Kyle Harding b143e36318 Add compile-time switch for EDNS Client Subnet Module Options 
See: https://github.com/klutchell/unbound-docker/issues/165

Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-08-29 08:39:36 -04:00
Renovate Bot 1aed0533f7 Update alpine Docker tag to v3.18.3 2023-08-22 12:07:57 +00:00
Renovate Bot 82a4a84e32 Pin dependencies 2023-07-18 19:07:41 +00:00
Renovate Bot 370d872db9 Update alpine Docker tag to v3.18.2 2023-07-06 12:47:02 +00:00
Renovate Bot 9257c41b46 Update alpine Docker tag 2023-05-22 14:05:48 +00:00
Kyle Harding bc18e9f16a Use shared libraries to reduce image size 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-05-17 14:46:37 -04:00
Kyle Harding e948647f6b Do not run unbound-anchor during image build 
We don't want to overwrite the root.keys file provided
by the root overlay.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-05-17 13:56:57 -04:00
Kyle Harding 33c492f6a9 Remove buildroot and compile static binaries from source 
Allow faster development by controlling build steps in this project
rather than deferring changes to buildroot.

This is a potentially breaking change, but efforts have been made
to maintain paths and usernames for compatibility with previous
releases.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-05-17 12:29:05 -04:00
Kyle Harding 4949fa67a0 Bump unbound to 1.17.1 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-01-13 14:10:10 -05:00
Kyle Harding 100c269a75 Bump buildroot to 2022.02.6 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-10-13 12:47:08 -04:00