starred/unbound-docker
1
0
Fork 0
mirror of https://github.com/klutchell/unbound-docker.git synced 2026-10-16 08:02:48 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,014 Commits 13 Branches 43 Tags
4220ecfa79528fa2fb76114ecd318c9f8a9b5921
Commit Graph
89 Commits
Author SHA1 Message Date
klutchell-renovate[bot] 8e7280b347 Update alpine Docker tag 2025-06-02 04:16:07 +00:00
klutchell-renovate[bot] 8c30513ec3 Update docker/dockerfile Docker tag to v1.16 2025-05-26 04:44:11 +00:00
klutchell-renovate[bot] e0fc8ebd63 Update docker/dockerfile:1.15 Docker digest to 9857836 2025-05-05 04:11:01 +00:00
Kyle Harding 12287d5ab8 Update Unbound to release 1.23.0 
This release features changed defaults, fast reload, redis replica,
DNS Error Reporting, and bug fixes.

See https://github.com/NLnetLabs/unbound/releases/tag/release-1.23.0

Signed-off-by: Kyle Harding <kyle@balena.io>
 2025-04-24 09:35:35 -04:00
klutchell-renovate[bot] e6d48ac2fd Update docker/dockerfile Docker tag to v1.15 2025-04-21 04:43:10 +00:00
klutchell-renovate[bot] 9f3cba37a4 Update docker/dockerfile:1.14 Docker digest to 4c68376 2025-03-10 04:08:01 +00:00
klutchell-renovate[bot] f55323db78 Update docker/dockerfile Docker tag to v1.14 2025-02-24 05:09:54 +00:00
klutchell-renovate[bot] 16cee7d19f Update alpine Docker tag to v3.21.3 2025-02-17 05:09:11 +00:00
renovate[bot] 7c2c07f51a Update docker/dockerfile Docker tag to v1.13 2025-02-05 17:39:16 +00:00
Kyle Harding 9a57d22467 Update paths to crypto libraries 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2025-01-13 12:17:26 -05:00
renovate[bot] 27954204fb Update alpine Docker tag 2025-01-13 16:55:34 +00:00
renovate[bot] 252ddcee47 Update alpine Docker tag to v3.20.5 2025-01-13 10:20:35 +00:00
renovate[bot] e815286fd9 Update docker/dockerfile:1.12 Docker digest to 93bfd3b 2024-12-23 10:10:20 +00:00
renovate[bot] a952490877 Update docker/dockerfile Docker tag to v1.12 2024-12-09 08:58:06 +00:00
renovate[bot] 505012713f Update alpine:3.20.3 Docker digest to 1e42bbe 2024-11-18 10:24:35 +00:00
renovate[bot] 1d319888c2 Update docker/dockerfile:1.11 Docker digest to 10c699f 2024-11-11 07:06:43 +00:00
renovate[bot] 6a661091f3 Update docker/dockerfile Docker tag to v1.11 2024-11-04 10:54:31 +00:00
Kyle Harding 712af1bbb4 Add a drill binary wrapper to simplify exit codes 
Docker healthchecks expect processes to exit with 0 or 1,
the other exit codes are reserved.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2024-10-24 13:26:48 -04:00
Kyle Harding 66e6822c52 Update Unbound to release 1.22.0 
See: https://github.com/NLnetLabs/unbound/releases/tag/release-1.22.0
Signed-off-by: Kyle Harding <kyle@balena.io>
 2024-10-17 10:59:54 -04:00
Kyle Harding 771cfd31f1 Update Unbound to 1.21.1 
This security release fixes CVE-2024-8508.

See https://github.com/NLnetLabs/unbound/releases/tag/release-1.21.1
Signed-off-by: Kyle Harding <kyle@balena.io>
 2024-10-03 14:06:44 -04:00
Kyle Harding 58319e144e Add pre-commit hooks 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2024-10-02 15:06:29 -04:00
Ingmar Stein ff98f54056 Enable support for DNS-over-HTTPS 
Unbound needs to be compiled with libnghttp2 in order to provide DNS-over-HTTPS:
https://github.com/NLnetLabs/unbound/blob/5e9b6296b7ab586eaa956f21b98c574967ceb06e/doc/unbound.conf.5.in#L583-L584
 2024-09-18 14:54:46 -04:00
Ingmar Stein 1fa70580bf Update ldns to 1.8.4 
Changelog: https://raw.githubusercontent.com/NLnetLabs/ldns/develop/Changelog
 2024-09-18 09:06:51 -04:00
Ingmar Stein dad916da1f Enable TCP Fast Open 
Unbound supports the TCP Fast Open feature [0] which can be enabled at build time with:

--enable-tfo-client
--enable-tfo-server

TFO is generally considered as worthwhile feature and doesn't require
any additional dependencies.

[0] https://lwn.net/Articles/508865/
 2024-09-16 16:25:17 +02:00
Renovate Bot c2205177ec Update docker/dockerfile Docker tag to v1.10 2024-09-16 13:40:06 +00:00
Renovate Bot a5ee5a3345 Update alpine Docker tag to v3.20.3 2024-09-09 14:06:50 +00:00
Kyle Harding be53628a89 Update to Unbound 1.21.0 
This release has a fix for the CAMP and CacheFlush issues. They have a
low severity for Unbound, since it does not affect Unbound so much.

See: https://github.com/NLnetLabs/unbound/releases/tag/release-1.21.0
Signed-off-by: Kyle Harding <kyle@balena.io>
 2024-08-15 08:47:30 -04:00
Renovate Bot 213260e793 Update alpine Docker tag to v3.20.2 2024-07-29 13:36:33 +00:00
Renovate Bot 88bfc89b24 Update docker/dockerfile Docker tag to v1.9 2024-07-15 13:36:52 +00:00
Kyle Harding f533951b54 Download root hints and generate root key at build time 
There is no need for these to be included with the
source and it just adds a manual step to be considered.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2024-06-26 08:49:18 -04:00
Renovate Bot 4c03ec11f8 Update alpine Docker tag to v3.20.1 2024-06-24 14:08:05 +00:00
Renovate Bot 864aa64989 Update all digest updates 2024-06-24 13:38:27 +00:00
Renovate Bot ed4904bf32 Update docker/dockerfile Docker tag to v1.8 2024-06-17 13:11:08 +00:00
Renovate Bot f43bba0dec Update alpine Docker tag 2024-05-27 14:08:32 +00:00
churchofnoise d1cb135e72 Update Dockerfile 
Update to Unbound 1.20.0
 2024-05-08 11:20:18 +02:00
Renovate Bot ddc825db85 Update docker/dockerfile:1.7 Docker digest to a57df69 2024-04-26 13:29:24 +00:00
hugochc 2523e14500 Fix Dockerfile identation 2024-04-01 09:23:07 -04:00
hugochc 4e0f8832c8 Fix Cache DB module compile option 2024-04-01 09:23:07 -04:00
hugochc 2352252072 Fix identation in Dockerfile 2024-03-15 10:25:13 -03:00
hugochc 956cbf117d Added option to enable CacheDB Module with Redis backend. 
How to use:
The Cache DB module must be configured in the (unbound.conf) module-config: directive, e.g.: module-config: "validator cachedb iterator"

Additionally, must be created cachedb.conf file under custom.conf.d directory with Redis credentials.
 2024-03-15 09:19:21 -03:00
churchofnoise df7d37322f Update Dockerfile 2024-03-14 15:03:52 +01:00
churchofnoise 721c1c8018 Update Dockerfile 2024-03-07 12:32:01 +01:00
Renovate Bot 994c6cc740 Update docker/dockerfile Docker tag to v1.7 2024-03-05 22:08:22 +00:00
Kyle Harding 83577cb114 Update Unbound to 1.19.1 
This security release fixes two DNSSEC validation vulnerabilities:
CVE-2023-50387 (referred here as the KeyTrap vulnerability) and
CVE-2023-50868 (referred here as the NSEC3 vulnerability).

See: https://github.com/NLnetLabs/unbound/releases/tag/release-1.19.1
Signed-off-by: Kyle Harding <kyle@balena.io>
 2024-02-13 08:38:50 -05:00
Renovate Bot f1a41b7a6e Update alpine Docker tag to v3.19.1 2024-01-27 00:50:32 +00:00
Kyle Harding 4ff7a02ae5 Use loose matching for some library version files 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-12-18 09:04:37 -05:00
Renovate Bot 462ce796c9 Update alpine Docker tag 2023-12-18 12:44:43 +00:00
Renovate Bot f70972b87b Update alpine:3.18.5 Docker digest to 34871e7 2023-12-01 02:42:00 +00:00
Renovate Bot e46e2bf89b Update alpine Docker tag to v3.18.5 2023-12-01 00:11:20 +00:00
Kyle Harding fbfe18dcca Change unbound user to a system user with nologin 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-11-16 10:57:49 -05:00