Commit Graph

34 Commits

Author SHA1 Message Date
Cory 5a61e5047b Resolve error 'the working directory is not writable' by switching into the /tmp/bind directory before executing the bind process 2020-12-14 11:27:06 +10:30
Ventz Petkov 17161d55f9 Updated for: Updated for: 9.16.6-r0 2020-08-31 10:41:33 -04:00
Ventz Petkov d8691b7076 Locked down permissions for /etc/bind to absolutely needed ones, while still making sure mapped volumes have the needed permissions to start the container 2020-05-12 02:04:44 -04:00
Ventz Petkov b2983bd53f TWO MAJOR CHANGES: Updated ROOT HINTS file from InterNIC as it was updated 4-29-2020. Also changed the permissions both build and entrypoint (run-time change) to match least permissions needed. This should tighten up the permissions for dynamically generated zones 2020-04-29 23:04:40 -04:00
Ventz Petkov 9e4777ca51 Updated for: 9.14.8-r5, along with CVE-2020-11501 and CVE-2020-1967 2020-04-28 22:35:43 -04:00
Ventz Petkov a4c9ab2462 Added new BIND_LOG environment variable. By default you still have -g, however you can now override directly with -f for foreground logging. The README also has a detailed section on logging practices. I've also updated the binary version to the latest Alpine image v3.11.3 2020-03-06 23:23:35 -05:00
Ventz Petkov c1cc59a24f Updated for: 9.14.8-r0 and added FAQs and clarifications in documentation 2020-02-06 16:36:36 -05:00
Ventz Petkov c748b9aba6 Updated for: 9.14.7-r0 - CVE-2019-6475 and CVE-2019-6476 - https://github.com/ventz/docker-bind/issues/28 2019-10-24 13:34:56 -04:00
Ventz Petkov 7cd4708129 Added bind-plugins for filters which were also separated in Alpine 3.10 / BIND 9.14 into dedicated package. Thanks to @jongj for pointing it out. 2019-06-26 16:07:57 -04:00
Ventz Petkov 6de0c62348 Upgrade to latest alpine which is now 3.10 and thus bind 9.14.3 - thanks to @ikluft for pointing this out. Also, it seems that Alpine 3.10 has removed rndc-config from the bind package, and it's now in bind-tools. 2019-06-26 01:34:19 -04:00
Ventz Petkov 38bfc87ca3 Updated for: 9.12.4_p2-r0 - CVE-2019-6471 - https://github.com/ventz/docker-bind/issues/19 2019-06-24 00:23:45 -04:00
Ventz Petkov 542888918c Hot Fix #1 - https://github.com/ventz/docker-bind/issues/18 2019-05-04 02:51:14 -04:00
Ventz Petkov d44770e9fd Updated for: 9.12.4_p1-r1 - CVE-2018-5743, CVE-2019-6467, and CVE-2019-6468 - https://github.com/ventz/docker-bind/issues/17 2019-05-04 02:25:54 -04:00
Ventz Petkov 386f0f01c0 CVE-2019-6465, CVE-2018-5745, and CVE-2018-5745 - https://github.com/ventz/docker-bind/issues/15 2019-04-18 14:55:32 -04:00
Ventz Petkov cbfafc9094 Updated for: 9.12.3_r0 2019-01-15 01:31:59 -05:00
Ventz Petkov f585357323 Fix for being able to pass override options to bind from the run commandline - as per @lkollenberger's use case 2018-11-19 16:08:35 -05:00
Ventz Petkov 81271eb153 Updated for: 9.12.2_p1-r0 2018-10-09 18:17:45 -04:00
Ventz Petkov b83afc1137 Updated for: 9.12.1_p2-r0 2018-09-04 15:11:08 -04:00
Ventz Petkov df714f809b Updated for: 9.11.3-r0 - https://github.com/alpinelinux/aports/pull/4314 | Fix for: https://kb.isc.org/article/AA-01602/0 and https://kb.isc.org/article/AA-01606/0, covered by: https://www.us-cert.gov/ncas/current-activity/2018/05/18/ISC-Releases-Security-Advisories-BIND 2018-06-06 15:26:05 -04:00
Ventz Petkov 22307fab9c Cleanup of directory for zones back to /var/cache/bind. Also stable release tag 2018-02-28 10:50:35 -05:00
Ventz Petkov 1695a7a4d6 Cleanup of Readme 2018-02-15 18:42:57 -05:00
Ventz Petkov 5f7cf398d7 Cleaned up examples in README for better Dockerhub display 2018-02-12 23:43:22 -05:00
Ventz Petkov 108554317e Major Upgrade - added very detailed configs for many scenarios, with lots of examples. The server is now fully functional for an authoritative master and a recursive/forwarding cacher. You can still mount over the /etc/bind and /var/bind directories and override everything yourself. This should help many users who did not know where to start with bind. 2018-02-12 23:35:24 -05:00
Ventz Petkov ca044d1672 Updated for 9.11.2_p1-r0 - CVE-2017-3145 - https://kb.isc.org/article/AA-01542/0/CVE-2017-3145 2018-02-06 17:23:44 -05:00
Ventz Petkov 0518404de9
Merge pull request #8 from tcely/patch-1
Use exec in entrypoint.sh - It seems there are many benefits to this and no downsides. Thanks to @tcely for proposing it, and for @obaarne for confirming it/finding the best practices around it!
2018-01-24 12:03:52 -05:00
Ventz Petkov dbce9eb957
Merge pull request #9 from tcely/patch-2
Upgrade packages before adding bind - while not per "docker best practices", it absolutely makes sense here since so few packages are used, and generally you want the libraries/dependencies for bind to be as updated as possible.
2018-01-24 12:02:45 -05:00
tcely e21c57a65d
Upgrade packages before adding bind 2018-01-17 18:55:13 -05:00
tcely 5c903d7d84
Use exec in entrypoint.sh 2018-01-17 18:41:35 -05:00
Ventz Petkov 82c4501366 Updated for 9.11.1_p1-r1, due to multiple medium and high vulnerabilities (https://kb.isc.org/article/AA-01503/0, https://kb.isc.org/article/AA-01504/0, https://kb.isc.org/article/AA-01495/0) 2017-09-18 14:19:07 -04:00
Ventz Petkov 741e6adb66 Updated for 9.11.1_p1-r0, due to: https://kb.isc.org/article/AA-01497 2017-06-20 12:03:50 -04:00
Ventz Petkov 9a282a87b6 Cleaned up notes, structure, build, supplied run, etc 2017-03-14 04:37:37 -04:00
Ventz Petkov 08a6019c24 Added an entry point to chown /var/cache/bind in run time, in case you are mounting over with a folder that is owned by root 2016-01-10 21:56:33 -05:00
Ventz Petkov 642ec12fe6 Cleaned up ReadMe 2016-01-10 16:24:26 -05:00
Ventz Petkov 5b202c1019 Moving Docker bind container to github so that I can autobuild in docker hub 2016-01-10 16:11:56 -05:00