Updated for: 9.14.7-r0 - CVE-2019-6475 and CVE-2019-6476 - https://github.com/ventz/docker-bind/issues/28

Added bind-plugins for filters which were also separated in Alpine 3.10 / BIND 9.14 into dedicated package. Thanks to @jongj for pointing it out.
Upgrade to latest alpine which is now 3.10 and thus bind 9.14.3 - thanks to @ikluft for pointing this out. Also, it seems that Alpine 3.10 has removed rndc-config from the bind package, and it's now in bind-tools.
2019-10-24 13:34:56 -04:00 · 2019-06-26 16:07:57 -04:00 · 2019-06-26 01:34:19 -04:00 · 2019-06-24 00:23:45 -04:00 · 2019-05-04 02:51:14 -04:00
3 changed files with 7 additions and 6 deletions
@@ -1,6 +1,6 @@
-### ISC BIND9 Container (Stable: 9.12.4_xx) built on top of Alpine
-### Last update: 5-4-19
-### Latest Stable Docker Tag: 9.12.4_p1-r1
+### ISC BIND9 Container (Stable: 9.14.7_xx) built on top of Alpine
+### Last update: 10-24-19
+### Latest Stable Docker Tag: 9.14.7-r0

 NOTE: "Last Update" is the date of the latest DockerHub build.

@@ -1,7 +1,7 @@
 FROM alpine:latest
 EXPOSE 53 53/udp

-RUN apk --update upgrade && apk add bind
+RUN apk --update upgrade && apk add bind bind-tools bind-plugins

 # /etc/bind needs to be owned by root, group owned by "bind", and chmod 750
 # since we are mounting, do it manually
@@ -15,7 +15,7 @@ RUN apk --update upgrade && apk add bind
 RUN mkdir -m 0770 -p /etc/bind && chown -R root:named /etc/bind ; \
    mkdir -m 0770 -p /var/cache/bind && chown -R named:named /var/cache/bind ; \
    wget -q -O /etc/bind/bind.keys https://ftp.isc.org/isc/bind9/keys/9.11/bind.keys.v9_11 ; \
-    rndc-confgen -a -r /dev/urandom
+    rndc-confgen -a

 COPY configs/. /etc/bind/

@@ -1,6 +1,7 @@
 #!/bin/sh
 OPTIONS=$@
-chown -R root:named /etc/bind /var/cache/bind /var/run/named
+chown -R root:named /etc/bind /var/run/named
+chown -R named:named /var/cache/bind
 chmod -R 770 /var/cache/bind /var/run/named
 chmod -R 750 /etc/bind
 # Run in foreground and log to STDERR (console):
Author	SHA1	Message	Date
Ventz Petkov	c748b9aba6	Updated for: 9.14.7-r0 - CVE-2019-6475 and CVE-2019-6476 - https://github.com/ventz/docker-bind/issues/28	2019-10-24 13:34:56 -04:00
Ventz Petkov	7cd4708129	Added bind-plugins for filters which were also separated in Alpine 3.10 / BIND 9.14 into dedicated package. Thanks to @jongj for pointing it out.	2019-06-26 16:07:57 -04:00
Ventz Petkov	6de0c62348	Upgrade to latest alpine which is now 3.10 and thus bind 9.14.3 - thanks to @ikluft for pointing this out. Also, it seems that Alpine 3.10 has removed rndc-config from the bind package, and it's now in bind-tools.	2019-06-26 01:34:19 -04:00
Ventz Petkov	38bfc87ca3	Updated for: 9.12.4_p2-r0 - CVE-2019-6471 - https://github.com/ventz/docker-bind/issues/19	2019-06-24 00:23:45 -04:00
Ventz Petkov	542888918c	Hot Fix #1 - https://github.com/ventz/docker-bind/issues/18	2019-05-04 02:51:14 -04:00