Updated for: 9.14.7-r0 - CVE-2019-6475 and CVE-2019-6476 - https://github.com/ventz/docker-bind/issues/28

README.md

@@ -1,6 +1,6 @@
-### ISC BIND9 Container (Stable: 9.12.3_xx) built on top of Alpine
+### ISC BIND9 Container (Stable: 9.14.7_xx) built on top of Alpine
-### Last update: 4-18-19
+### Last update: 10-24-19
-### Latest Stable Docker Tag: 9.12.3_r1
+### Latest Stable Docker Tag: 9.14.7-r0
 
 NOTE: "Last Update" is the date of the latest DockerHub build.
 

container/Dockerfile

@@ -1,7 +1,7 @@
 FROM alpine:latest
 EXPOSE 53 53/udp
 
-RUN apk --update upgrade && apk add bind
+RUN apk --update upgrade && apk add bind bind-tools bind-plugins
 
 # /etc/bind needs to be owned by root, group owned by "bind", and chmod 750
 # since we are mounting, do it manually
@@ -13,9 +13,9 @@ RUN apk --update upgrade && apk add bind
 # &
 # Get latest bind.keys
 RUN mkdir -m 0770 -p /etc/bind && chown -R root:named /etc/bind ; \
-    mkdir -m 0770 -p /var/cache/bind && chown -R root:named /var/cache/bind ; \
+    mkdir -m 0770 -p /var/cache/bind && chown -R named:named /var/cache/bind ; \
     wget -q -O /etc/bind/bind.keys https://ftp.isc.org/isc/bind9/keys/9.11/bind.keys.v9_11 ; \
-    rndc-confgen -a -r /dev/urandom
+    rndc-confgen -a
 
 COPY configs/. /etc/bind/
 

container/entrypoint.sh

@@ -1,6 +1,7 @@
 #!/bin/sh
 OPTIONS=$@
-chown -R root:named /etc/bind /var/cache/bind /var/run/named
+chown -R root:named /etc/bind /var/run/named
+chown -R named:named /var/cache/bind
 chmod -R 770 /var/cache/bind /var/run/named
 chmod -R 750 /etc/bind
 # Run in foreground and log to STDERR (console):