Updated for: 9.12.4_p1-r1 - CVE-2018-5743, CVE-2019-6467, and CVE-2019-6468 - https://github.com/ventz/docker-bind/issues/17

README.md

@@ -1,6 +1,6 @@
-### ISC BIND9 Container (Stable: 9.11.2_xx) built on top of Alpine
+### ISC BIND9 Container (Stable: 9.12.4_xx) built on top of Alpine
-### Last update: 2-28-18 (major new update!)
+### Last update: 5-4-19
-### Latest Stable Docker Tag: 9.11.2_p1-r0
+### Latest Stable Docker Tag: 9.12.4_p1-r1
 
 NOTE: "Last Update" is the date of the latest DockerHub build.
 
@@ -76,3 +76,6 @@ docker run --name=dns-resolver
 -v /DATA/var/cache/bind:/var/cache/bind \
 ventz/bind
 ```
+
+Additional options may be passed to the bind daemon via the `OPTIONS` argument, provided as:
+`docker run --env OPTIONS='...'

container/Dockerfile

@@ -13,7 +13,7 @@ RUN apk --update upgrade && apk add bind
 # &
 # Get latest bind.keys
 RUN mkdir -m 0770 -p /etc/bind && chown -R root:named /etc/bind ; \
-    mkdir -m 0770 -p /var/cache/bind && chown -R root:named /var/cache/bind ; \
+    mkdir -m 0770 -p /var/cache/bind && chown -R named:named /var/cache/bind ; \
     wget -q -O /etc/bind/bind.keys https://ftp.isc.org/isc/bind9/keys/9.11/bind.keys.v9_11 ; \
     rndc-confgen -a -r /dev/urandom
 

container/entrypoint.sh

@@ -1,6 +1,7 @@
 #!/bin/sh
+OPTIONS=$@
 chown -R root:named /etc/bind /var/cache/bind /var/run/named
 chmod -R 770 /var/cache/bind /var/run/named
 chmod -R 750 /etc/bind
 # Run in foreground and log to STDERR (console):
-exec /usr/sbin/named -c /etc/bind/named.conf -g -u named
+exec /usr/sbin/named -c /etc/bind/named.conf -g -u named $OPTIONS