Updated for: 9.14.7-r0 - CVE-2019-6475 and CVE-2019-6476 - https://github.com/ventz/docker-bind/issues/28

README.md

@@ -1,6 +1,6 @@
-### ISC BIND9 Container (Stable: 9.12.1_xx) built on top of Alpine
+### ISC BIND9 Container (Stable: 9.14.7_xx) built on top of Alpine
-### Last update: 9-4-18 (major new update!)
+### Last update: 10-24-19
-### Latest Stable Docker Tag: 9.12.1_p2-r0
+### Latest Stable Docker Tag: 9.14.7-r0
 
 NOTE: "Last Update" is the date of the latest DockerHub build.
 
@@ -76,3 +76,6 @@ docker run --name=dns-resolver
 -v /DATA/var/cache/bind:/var/cache/bind \
 ventz/bind
 ```
+
+Additional options may be passed to the bind daemon via the `OPTIONS` argument, provided as:
+`docker run --env OPTIONS='...'

container/Dockerfile

@@ -1,7 +1,7 @@
 FROM alpine:latest
 EXPOSE 53 53/udp
 
-RUN apk --update upgrade && apk add bind
+RUN apk --update upgrade && apk add bind bind-tools bind-plugins
 
 # /etc/bind needs to be owned by root, group owned by "bind", and chmod 750
 # since we are mounting, do it manually
@@ -13,9 +13,9 @@ RUN apk --update upgrade && apk add bind
 # &
 # Get latest bind.keys
 RUN mkdir -m 0770 -p /etc/bind && chown -R root:named /etc/bind ; \
-    mkdir -m 0770 -p /var/cache/bind && chown -R root:named /var/cache/bind ; \
+    mkdir -m 0770 -p /var/cache/bind && chown -R named:named /var/cache/bind ; \
     wget -q -O /etc/bind/bind.keys https://ftp.isc.org/isc/bind9/keys/9.11/bind.keys.v9_11 ; \
-    rndc-confgen -a -r /dev/urandom
+    rndc-confgen -a
 
 COPY configs/. /etc/bind/
 

container/entrypoint.sh

@@ -1,6 +1,8 @@
 #!/bin/sh
-chown -R root:named /etc/bind /var/cache/bind /var/run/named
+OPTIONS=$@
+chown -R root:named /etc/bind /var/run/named
+chown -R named:named /var/cache/bind
 chmod -R 770 /var/cache/bind /var/run/named
 chmod -R 750 /etc/bind
 # Run in foreground and log to STDERR (console):
-exec /usr/sbin/named -c /etc/bind/named.conf -g -u named
+exec /usr/sbin/named -c /etc/bind/named.conf -g -u named $OPTIONS