Commit Graph
5 Commits
Author SHA1 Message Date
Kyle Harding f533951b54 Download root hints and generate root key at build time
There is no need for these to be included with the
source and it just adds a manual step to be considered.

Signed-off-by: Kyle Harding <kyle@balena.io>
2024-06-26 08:49:18 -04:00
Kyle Harding 83577cb114 Update Unbound to 1.19.1
This security release fixes two DNSSEC validation vulnerabilities:
CVE-2023-50387 (referred here as the KeyTrap vulnerability) and
CVE-2023-50868 (referred here as the NSEC3 vulnerability).

See: https://github.com/NLnetLabs/unbound/releases/tag/release-1.19.1
Signed-off-by: Kyle Harding <kyle@balena.io>
2024-02-13 08:38:50 -05:00
Kyle Harding 6c0709eecb Update steps to generate root.hints and root.key
Signed-off-by: Kyle Harding <kyle@balena.io>
2023-11-15 09:11:00 -05:00
Kyle Harding 2a791bd918 BREAKING: Move runtime chroot directory to /var/unbound
This will make it easier to override configuration files in /etc/unbound
without having to provide custom root hints.

Signed-off-by: Kyle Harding <kyle@balena.io>
2023-11-14 19:10:40 -05:00
Kyle Harding 12814688da Add CONTRIBUTING and LICENSE files
Signed-off-by: Kyle Harding <kyle@balena.io>
2023-11-09 08:50:28 -05:00