vincejv/unbound repository overview

⁠Unbound DNS Server Docker Image

A fork of https://github.com/MatthewVance/unbound-docker⁠, with customized features

• Compatible with recursive mode, use the sample config in sample folder
• remote-control can be toggled on/off by mounting a custom config file on /opt/unbound/etc/unbound/unbound.conf.d
• Still keeps the autoconfiguration of rrset, msg-cache and slabs from MatthewVance's docker image⁠
• Compatible with modern Docker cgroups, /sys/fs/cgroup/memory.max
• Slim images: minimal footprint -Os and runs on alpine, focused on DNS recursion only
• Full images: includes additional features such as Redis cachedb, DNSCrypt, and DNS-over-HTTPS, runs on Debian glibc
• Built on latest LLVM toolchain and lld linker with -flto optimizations
• Multi-architecture support: armhf, armv7, arm64, i386, and x86_64
• Specialized builds with -march for sandybridge and skylake

⁠Supported tags and respective Dockerfile links

• latest (Dockerfile)⁠
• skylake (Dockerfile)⁠
• sandybridge (Dockerfile)⁠
• slim (Dockerfile)⁠
• slim-skylake (Dockerfile)⁠
• slim-sandybridge (Dockerfile)⁠
• testing (Dockerfile)⁠

⁠What is Unbound?

Unbound is a validating, recursive, and caching DNS resolver.

⁠How to use this image

⁠Standard usage

Run this container with the following command:

docker run \
--name=my-unbound \
--detach=true \
--publish=53:53/tcp \
--publish=53:53/udp \
--restart=unless-stopped \
vincejv/unbound:latest

⁠Docker Compose

Grab the sample docker-compose.yml file in sample directory

version: '3'
services:
  unbound:
    container_name: unbound
    image: vincejv/unbound:latest
    network_mode: host
    volumes:
      - type: bind
        read_only: true
        source: ./conf
        target: /opt/unbound/etc/unbound/unbound.conf.d
      - type: bind
        read_only: true
        source: ./forward-records.conf
        target: /opt/unbound/etc/unbound/forward-records.conf
      - type: bind
        read_only: true
        source: ./local-zone.conf
        target: /opt/unbound/etc/unbound/a-records.conf
    restart: unless-stopped