Cory
5a61e5047b
Resolve error 'the working directory is not writable' by switching into the /tmp/bind directory before executing the bind process
2020-12-14 11:27:06 +10:30
Ventz Petkov
17161d55f9
Updated for: Updated for: 9.16.6-r0
2020-08-31 10:41:33 -04:00
Ventz Petkov
d8691b7076
Locked down permissions for /etc/bind to absolutely needed ones, while still making sure mapped volumes have the needed permissions to start the container
2020-05-12 02:04:44 -04:00
Ventz Petkov
b2983bd53f
TWO MAJOR CHANGES: Updated ROOT HINTS file from InterNIC as it was updated 4-29-2020. Also changed the permissions both build and entrypoint (run-time change) to match least permissions needed. This should tighten up the permissions for dynamically generated zones
2020-04-29 23:04:40 -04:00
Ventz Petkov
9e4777ca51
Updated for: 9.14.8-r5, along with CVE-2020-11501 and CVE-2020-1967
2020-04-28 22:35:43 -04:00
Ventz Petkov
a4c9ab2462
Added new BIND_LOG environment variable. By default you still have -g, however you can now override directly with -f for foreground logging. The README also has a detailed section on logging practices. I've also updated the binary version to the latest Alpine image v3.11.3
2020-03-06 23:23:35 -05:00
Ventz Petkov
c1cc59a24f
Updated for: 9.14.8-r0 and added FAQs and clarifications in documentation
2020-02-06 16:36:36 -05:00
Ventz Petkov
c748b9aba6
Updated for: 9.14.7-r0 - CVE-2019-6475 and CVE-2019-6476 - https://github.com/ventz/docker-bind/issues/28
2019-10-24 13:34:56 -04:00
Ventz Petkov
7cd4708129
Added bind-plugins for filters which were also separated in Alpine 3.10 / BIND 9.14 into dedicated package. Thanks to @jongj for pointing it out.
2019-06-26 16:07:57 -04:00
Ventz Petkov
6de0c62348
Upgrade to latest alpine which is now 3.10 and thus bind 9.14.3 - thanks to @ikluft for pointing this out. Also, it seems that Alpine 3.10 has removed rndc-config from the bind package, and it's now in bind-tools.
2019-06-26 01:34:19 -04:00
Ventz Petkov
38bfc87ca3
Updated for: 9.12.4_p2-r0 - CVE-2019-6471 - https://github.com/ventz/docker-bind/issues/19
2019-06-24 00:23:45 -04:00
Ventz Petkov
542888918c
Hot Fix #1 - https://github.com/ventz/docker-bind/issues/18
2019-05-04 02:51:14 -04:00
Ventz Petkov
d44770e9fd
Updated for: 9.12.4_p1-r1 - CVE-2018-5743, CVE-2019-6467, and CVE-2019-6468 - https://github.com/ventz/docker-bind/issues/17
2019-05-04 02:25:54 -04:00
Ventz Petkov
386f0f01c0
CVE-2019-6465, CVE-2018-5745, and CVE-2018-5745 - https://github.com/ventz/docker-bind/issues/15
2019-04-18 14:55:32 -04:00
Ventz Petkov
cbfafc9094
Updated for: 9.12.3_r0
2019-01-15 01:31:59 -05:00
Ventz Petkov
f585357323
Fix for being able to pass override options to bind from the run commandline - as per @lkollenberger's use case
2018-11-19 16:08:35 -05:00
Ventz Petkov
81271eb153
Updated for: 9.12.2_p1-r0
2018-10-09 18:17:45 -04:00
Ventz Petkov
b83afc1137
Updated for: 9.12.1_p2-r0
2018-09-04 15:11:08 -04:00
Ventz Petkov
df714f809b
Updated for: 9.11.3-r0 - https://github.com/alpinelinux/aports/pull/4314 | Fix for: https://kb.isc.org/article/AA-01602/0 and https://kb.isc.org/article/AA-01606/0 , covered by: https://www.us-cert.gov/ncas/current-activity/2018/05/18/ISC-Releases-Security-Advisories-BIND
2018-06-06 15:26:05 -04:00
Ventz Petkov
22307fab9c
Cleanup of directory for zones back to /var/cache/bind. Also stable release tag
2018-02-28 10:50:35 -05:00
Ventz Petkov
1695a7a4d6
Cleanup of Readme
2018-02-15 18:42:57 -05:00
Ventz Petkov
5f7cf398d7
Cleaned up examples in README for better Dockerhub display
2018-02-12 23:43:22 -05:00
Ventz Petkov
108554317e
Major Upgrade - added very detailed configs for many scenarios, with lots of examples. The server is now fully functional for an authoritative master and a recursive/forwarding cacher. You can still mount over the /etc/bind and /var/bind directories and override everything yourself. This should help many users who did not know where to start with bind.
2018-02-12 23:35:24 -05:00
Ventz Petkov
ca044d1672
Updated for 9.11.2_p1-r0 - CVE-2017-3145 - https://kb.isc.org/article/AA-01542/0/CVE-2017-3145
2018-02-06 17:23:44 -05:00
Ventz Petkov
0518404de9
Merge pull request #8 from tcely/patch-1
...
Use exec in entrypoint.sh - It seems there are many benefits to this and no downsides. Thanks to @tcely for proposing it, and for @obaarne for confirming it/finding the best practices around it!
2018-01-24 12:03:52 -05:00
Ventz Petkov
dbce9eb957
Merge pull request #9 from tcely/patch-2
...
Upgrade packages before adding bind - while not per "docker best practices", it absolutely makes sense here since so few packages are used, and generally you want the libraries/dependencies for bind to be as updated as possible.
2018-01-24 12:02:45 -05:00
tcely
e21c57a65d
Upgrade packages before adding bind
2018-01-17 18:55:13 -05:00
tcely
5c903d7d84
Use exec in entrypoint.sh
2018-01-17 18:41:35 -05:00
Ventz Petkov
82c4501366
Updated for 9.11.1_p1-r1, due to multiple medium and high vulnerabilities ( https://kb.isc.org/article/AA-01503/0 , https://kb.isc.org/article/AA-01504/0 , https://kb.isc.org/article/AA-01495/0 )
2017-09-18 14:19:07 -04:00
Ventz Petkov
741e6adb66
Updated for 9.11.1_p1-r0, due to: https://kb.isc.org/article/AA-01497
2017-06-20 12:03:50 -04:00
Ventz Petkov
9a282a87b6
Cleaned up notes, structure, build, supplied run, etc
2017-03-14 04:37:37 -04:00
Ventz Petkov
08a6019c24
Added an entry point to chown /var/cache/bind in run time, in case you are mounting over with a folder that is owned by root
2016-01-10 21:56:33 -05:00
Ventz Petkov
642ec12fe6
Cleaned up ReadMe
2016-01-10 16:24:26 -05:00
Ventz Petkov
5b202c1019
Moving Docker bind container to github so that I can autobuild in docker hub
2016-01-10 16:11:56 -05:00