Commit Graph
9 Commits
Author SHA1 Message Date
Kyle Harding 4ee78d58bd Add automated Unbound bump and release-tag workflows
bump-unbound opens a weekly PR updating the Dockerfile version+SHA256
ARGs and regenerating the conf-example; tag-unbound tags vX.Y.Z on the
content commit when that PR merges. Mirrors the dnscrypt-proxy-docker
workflows. Documented in CONTRIBUTING.md.

Signed-off-by: Kyle Harding <kyle@balena.io>
2026-07-22 11:16:19 -04:00
Kyle Harding 647ea4a878 Improve CONTRIBUTING.md for bump and release workflow
- Note that the test suite requires outbound DNS (UDP/TCP 53) and
  defer to CI as the authoritative source of test results
- Replace the stale PR #235 reference with a git log snippet so
  contributors can always find the most recent bump pattern
- Add a maintainers-only "Tagging a release" section documenting the
  content-commit-not-merge-commit convention and annotated/signed
  tag format

Signed-off-by: Kyle Harding <kyle@balena.io>
2026-05-20 10:36:48 -04:00
Kyle Harding 3955725b02 Update CONTRIBUTING.md
Signed-off-by: Kyle Harding <kyle@balena.io>
2025-07-16 13:16:02 -04:00
Kyle Harding 06abfbe67d Improve formatting and linting via prettier
Signed-off-by: Kyle Harding <kyle@balena.io>
2024-10-17 11:05:50 -04:00
Kyle Harding f533951b54 Download root hints and generate root key at build time
There is no need for these to be included with the
source and it just adds a manual step to be considered.

Signed-off-by: Kyle Harding <kyle@balena.io>
2024-06-26 08:49:18 -04:00
Kyle Harding 83577cb114 Update Unbound to 1.19.1
This security release fixes two DNSSEC validation vulnerabilities:
CVE-2023-50387 (referred here as the KeyTrap vulnerability) and
CVE-2023-50868 (referred here as the NSEC3 vulnerability).

See: https://github.com/NLnetLabs/unbound/releases/tag/release-1.19.1
Signed-off-by: Kyle Harding <kyle@balena.io>
2024-02-13 08:38:50 -05:00
Kyle Harding 6c0709eecb Update steps to generate root.hints and root.key
Signed-off-by: Kyle Harding <kyle@balena.io>
2023-11-15 09:11:00 -05:00
Kyle Harding 2a791bd918 BREAKING: Move runtime chroot directory to /var/unbound
This will make it easier to override configuration files in /etc/unbound
without having to provide custom root hints.

Signed-off-by: Kyle Harding <kyle@balena.io>
2023-11-14 19:10:40 -05:00
Kyle Harding 12814688da Add CONTRIBUTING and LICENSE files
Signed-off-by: Kyle Harding <kyle@balena.io>
2023-11-09 08:50:28 -05:00