teach/adlin
Archived
0
0
Fork 0
Code Issues 1 Pull requests 4 Releases Activity

Unbound is now also an accessible machine

Browse source
This commit is contained in:
nemunaire 2021-03-23 11:21:48 +01:00
commit a4aadc401a
3 changed files with 124 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

10
pkg/unbound/Dockerfile
View file

@ -1,15 +1,17 @@
FROM alpine
MAINTAINER Pierre-Olivier Mercier <nemunaire@nemunai.re>
RUN apk add --no-cache unbound dnssec-root
COPY docker-entrypoint.sh /
RUN apk add --no-cache alpine-baselayout bash busybox unbound unbound-openrc dnssec-root openssh openrc
VOLUME /etc/unbound
EXPOSE 53
EXPOSE 53/udp
ENTRYPOINT ["/docker-entrypoint.sh"]
CMD ["/usr/sbin/unbound", "-d"]
RUN unbound-anchor && mkdir -p /var/log && touch /var/log/unbound.log && chown unbound:unbound /var/log/unbound.log
RUN rc-update add unbound default && rc-update add sshd default && rc-update add networking default
COPY sshd_config /etc/ssh/sshd_config
CMD ["/sbin/openrc-init"]
LABEL org.mobyproject.config='{"binds": ["/etc/resolv.conf:/etc/resolv.conf"], "capabilities": ["CAP_NET_BIND_SERVICE"]}'