Alpine Linux Based DNSSEC Validating Recursive Unbound DNS Resolver Docker Image

This is an actively maintained and trustworthy, lightweight Alpine Linux based Docker image that runs Unbound, an open source high-performance DNS resolver brought to you by the nice people @NLnetLabs running as your own recursive DNS server in an "distroless" scratch image.

Features

Feature	Supported
Minimalist distroless scratch image	✅
Unprivileged user	✅
Libevent	✅
DNSSEC	✅
DNSCrypt	✅
DNSTap	✅
DNS64	✅
Draft-0x20 (caps-for-id: yes)	✅
DNS over HTTPS	✅
DNS over TLS	✅
QName Minimization	✅
Auth. zones with local copy of root zone	✅
Aggressive use of DNSSEC-Validated Cache	✅
Response Policy Zones	✅
Redis	✅
Python	❌
EDNS Client Subnet	❌

If you would like to have Unbound statistics, take a look here

Getting started

Docker containers are most easily used with docker compose.

• Some installation intructions and details
• You find example docker-compose files here
• There are some scripts in the directory scripts
  • self-build-docker-images.sh when you want or need to build the docker images yourself

Available Docker Tags

Tags

• 1.19.1-1 (latest)
• 1.19.1-0
• 1.19.0-5
• 1.19.0-4
• 1.19.0-3
• 1.19.0-2
• 1.19.0-1
• 1.19.0
• 1.19.0rc1 (Pre-release)
• 1.18.0-3
• 1.18.0-2
• 1.18.0-1
• 1.18.0
• 1.18.0rc1 (Pre-release)
• 1.17.1-7
• 1.17.1-6
• 1.17.1-5
• 1.17.1-4
• 1.17.1-3
• 1.17.1-2
• 1.17.1-1
• 1.17.1
• 1.17.1rc2 (Pre-release)
• 1.17.1rc1 (Pre-release)
• 1.17.0-5
• 1.17.0-4
• 1.17.0-3
• 1.17.0-2
• 1.17.0-1
• 1.17.0
• 1.16.3-1
• 1.17.0rc1 (Pre-release)
• 1.16.3
• 1.16.2-1
• 1.16.2
• 1.16.1-1
• 1.16.1
• 1.16.1rc1-1 (Pre-release)
• 1.16.1rc1 (Pre-release)
• 1.16.0-2
• 1.16.0-1
• 1.16.0
• 1.16.0rc1 (Pre-release)
• 1.15.0-7
• 1.15.0-6
• 1.15.0-5
• 1.15.0-4
• 1.15.0-3
• 1.15.0-2
• 1.15.0-1
• 1.15.0
• 1.15.0rc1 (Pre-release)
• 1.14.0

Changes

You can view the changelogs in the Releases section.

Feedback

I am here to help! Don't hesitate to contact me through a GitHub Issue if you have any questions, requests or problems with the image.

You can also reach me on Fosstodon:

Acknowledgements

• Alpine Linux
• Docker
• Unbound
• OpenSSL
• Libevent
• Redis
• Pi-hole
• StepSecurity
• The many Docker Images which got me inspired
• Thank you for using my image ❤️

Licenses

License

Unless otherwise specified, all code is released under the MIT license. See the LICENSE for details.

Licenses for other components

• Docker: Apache 2.0
• Unbound: BSD License
• OpenSSL: Apache-style license

Legal

Please note that this is a work of a private contributor and I'm neither affiliated with NLnet Labs or Pi-hole nor is NLnet Labs or Pi-hole involved in the development of the image. The marks and properties 'Unbound' and 'Pi-hole' are properties of NLnet Labs and Pi-hole respectively. All rights in the source codes, including logos relating to said marks and properties belong to their respective owners.