starred/unbound-docker
1
0
Fork 0
mirror of https://github.com/klutchell/unbound-docker.git synced 2026-10-17 00:02:46 +00:00
Code Issues Packages Projects Releases Wiki Activity
805 Commits 13 Branches 43 Tags
684636d5cf2c1072417bf94de19486ae5aee19bd
Commit Graph
60 Commits
Author SHA1 Message Date
Kyle Harding f533951b54 Download root hints and generate root key at build time 
There is no need for these to be included with the
source and it just adds a manual step to be considered.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2024-06-26 08:49:18 -04:00
Renovate Bot 4c03ec11f8 Update alpine Docker tag to v3.20.1 2024-06-24 14:08:05 +00:00
Renovate Bot 864aa64989 Update all digest updates 2024-06-24 13:38:27 +00:00
Renovate Bot ed4904bf32 Update docker/dockerfile Docker tag to v1.8 2024-06-17 13:11:08 +00:00
Renovate Bot f43bba0dec Update alpine Docker tag 2024-05-27 14:08:32 +00:00
churchofnoise d1cb135e72 Update Dockerfile 
Update to Unbound 1.20.0
 2024-05-08 11:20:18 +02:00
Renovate Bot ddc825db85 Update docker/dockerfile:1.7 Docker digest to a57df69 2024-04-26 13:29:24 +00:00
hugochc 2523e14500 Fix Dockerfile identation 2024-04-01 09:23:07 -04:00
hugochc 4e0f8832c8 Fix Cache DB module compile option 2024-04-01 09:23:07 -04:00
hugochc 2352252072 Fix identation in Dockerfile 2024-03-15 10:25:13 -03:00
hugochc 956cbf117d Added option to enable CacheDB Module with Redis backend. 
How to use:
The Cache DB module must be configured in the (unbound.conf) module-config: directive, e.g.: module-config: "validator cachedb iterator"

Additionally, must be created cachedb.conf file under custom.conf.d directory with Redis credentials.
 2024-03-15 09:19:21 -03:00
churchofnoise df7d37322f Update Dockerfile 2024-03-14 15:03:52 +01:00
churchofnoise 721c1c8018 Update Dockerfile 2024-03-07 12:32:01 +01:00
Renovate Bot 994c6cc740 Update docker/dockerfile Docker tag to v1.7 2024-03-05 22:08:22 +00:00
Kyle Harding 83577cb114 Update Unbound to 1.19.1 
This security release fixes two DNSSEC validation vulnerabilities:
CVE-2023-50387 (referred here as the KeyTrap vulnerability) and
CVE-2023-50868 (referred here as the NSEC3 vulnerability).

See: https://github.com/NLnetLabs/unbound/releases/tag/release-1.19.1
Signed-off-by: Kyle Harding <kyle@balena.io>
 2024-02-13 08:38:50 -05:00
Renovate Bot f1a41b7a6e Update alpine Docker tag to v3.19.1 2024-01-27 00:50:32 +00:00
Kyle Harding 4ff7a02ae5 Use loose matching for some library version files 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-12-18 09:04:37 -05:00
Renovate Bot 462ce796c9 Update alpine Docker tag 2023-12-18 12:44:43 +00:00
Renovate Bot f70972b87b Update alpine:3.18.5 Docker digest to 34871e7 2023-12-01 02:42:00 +00:00
Renovate Bot e46e2bf89b Update alpine Docker tag to v3.18.5 2023-12-01 00:11:20 +00:00
Kyle Harding fbfe18dcca Change unbound user to a system user with nologin 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-11-16 10:57:49 -05:00
Kyle Harding 6c0709eecb Update steps to generate root.hints and root.key 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-11-15 09:11:00 -05:00
Kyle Harding 2a791bd918 BREAKING: Move runtime chroot directory to /var/unbound 
This will make it easier to override configuration files in /etc/unbound
without having to provide custom root hints.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-11-14 19:10:40 -05:00
Kyle Harding 87faa6a18b Fix permissions of /etc in final image 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-11-14 19:08:43 -05:00
Renovate Bot 40078af727 Update docker/dockerfile Docker tag to v1.6 2023-11-10 20:35:43 +00:00
Kyle Harding 8e92b4cf7e Update Unbound to 1.19.0 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-11-08 09:25:32 -05:00
Renovate Bot 561599e00b Update alpine Docker tag to v3.18.4 2023-09-28 22:37:05 +00:00
Kyle Harding 39b4f6c02b Commit example configuration file for reference 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-08-30 10:04:36 -04:00
Kyle Harding c7c4ca4ae8 Update to Unbound release 1.18.0 
https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-18-0

Resolves: https://github.com/klutchell/unbound-docker/issues/175
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-08-30 10:04:35 -04:00
Kyle Harding b143e36318 Add compile-time switch for EDNS Client Subnet Module Options 
See: https://github.com/klutchell/unbound-docker/issues/165

Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-08-29 08:39:36 -04:00
Renovate Bot 1aed0533f7 Update alpine Docker tag to v3.18.3 2023-08-22 12:07:57 +00:00
Renovate Bot 82a4a84e32 Pin dependencies 2023-07-18 19:07:41 +00:00
Renovate Bot 370d872db9 Update alpine Docker tag to v3.18.2 2023-07-06 12:47:02 +00:00
Renovate Bot 9257c41b46 Update alpine Docker tag 2023-05-22 14:05:48 +00:00
Kyle Harding bc18e9f16a Use shared libraries to reduce image size 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-05-17 14:46:37 -04:00
Kyle Harding e948647f6b Do not run unbound-anchor during image build 
We don't want to overwrite the root.keys file provided
by the root overlay.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-05-17 13:56:57 -04:00
Kyle Harding 33c492f6a9 Remove buildroot and compile static binaries from source 
Allow faster development by controlling build steps in this project
rather than deferring changes to buildroot.

This is a potentially breaking change, but efforts have been made
to maintain paths and usernames for compatibility with previous
releases.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-05-17 12:29:05 -04:00
Kyle Harding 4949fa67a0 Bump unbound to 1.17.1 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2023-01-13 14:10:10 -05:00
Kyle Harding 100c269a75 Bump buildroot to 2022.02.6 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-10-13 12:47:08 -04:00
Kyle Harding f7930963d2 buildroot: Bump to LTS release 2022.02.5 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-09-21 17:55:30 -04:00
Kyle Harding 22add5219c Use official buildroot base image 
This should avoid full rebuilds when upstream debian
packages change.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-08-23 17:47:41 -04:00
Kyle Harding 7b0cf45ccb Switch to callable workflows 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-07-30 06:51:12 -04:00
Kyle Harding 302eca78d4 buildroot: bump version to 2022.02.2 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-06-05 06:13:38 -04:00
Kyle Harding db9e2c2338 Install config files after buildroot compile 
Saves build time when only making minor config changes.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-01-15 14:32:30 -05:00
Kyle Harding a1c2293bde Update buildroot base image to bullseye slim 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2022-01-13 09:51:10 -05:00
dependabot[bot] d3c11e3f62 Bump debian from bullseye-20211011 to bullseye-20211201 
Bumps debian from bullseye-20211011 to bullseye-20211201.

---
updated-dependencies:
- dependency-name: debian
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-12-14 12:55:19 +00:00
Kyle Harding 2cfd08ab9c Disable default healthcheck 
Healthchecks can be specified manually if required.

Signed-off-by: Kyle Harding <kyle@balena.io>
 2021-12-13 19:18:34 -05:00
Kyle Harding cd149bb258 Update unbound package to 1.14.0 
Signed-off-by: Kyle Harding <kyle@balena.io>
 2021-12-13 19:18:34 -05:00
dependabot[bot] 130aa4c869 Bump debian from bullseye-20210927 to bullseye-20211011 
Bumps debian from bullseye-20210927 to bullseye-20211011.

---
updated-dependencies:
- dependency-name: debian
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-10-18 14:05:26 -04:00
dependabot[bot] ad56696a07 patch: bump debian from bullseye-20210902 to bullseye-20210927 
Bumps debian from bullseye-20210902 to bullseye-20210927.

---
updated-dependencies:
- dependency-name: debian
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-10-06 10:39:26 -04:00