Adding source files

Dockerfile

@@ -0,0 +1,13 @@
+FROM bfren/alpine-s6:alpine3.18-4.5.7
+
+LABEL org.opencontainers.image.source="https://github.com/bfren/docker-unbound"
+
+ARG BF_IMAGE
+ARG BF_VERSION
+
+EXPOSE 53/tcp
+EXPOSE 53/udp
+
+COPY ./overlay /
+
+RUN bf-install

overlay/etc/bf/init.d/10-env

@@ -0,0 +1,12 @@
+#!/command/with-contenv sh
+
+set -euo pipefail
+export BF_E=`basename ${0}`
+
+
+#======================================================================================================================
+# Set environment variables.
+#======================================================================================================================
+
+bf-env "UNBOUND_CONF" "/etc/unbound/unbound.conf"
+bf-env "UNBOUND_TRUSTED_KEY" "/usr/share/dnssec-root/trusted-key.key"

overlay/etc/bf/init.d/11-conf

@@ -0,0 +1,13 @@
+#!/command/with-contenv sh
+
+set -euo pipefail
+export BF_E=`basename ${0}`
+
+
+#======================================================================================================================
+# Generate Unbound config file.
+#======================================================================================================================
+
+bf-esh \
+    ${BF_TEMPLATES}/unbound.conf.esh \
+    ${UNBOUND_CONF}

overlay/etc/periodic/daily/update-anchor

@@ -0,0 +1,10 @@
+#!/command/with-contenv sh
+set -euo pipefail
+export BF_E=`basename ${0}`
+
+
+#======================================================================================================================
+# Update root anchor.
+#======================================================================================================================
+
+unbound-update-root-anchor

overlay/etc/s6-overlay/s6-rc.d/unbound/finish

@@ -0,0 +1,11 @@
+#!/command/with-contenv sh
+
+set -euo pipefail
+export BF_E="${PWD##*/}/$(basename ${0})"
+
+
+#======================================================================================================================
+# Show helpful log message.
+#======================================================================================================================
+
+bf-svc-finish -t

overlay/etc/s6-overlay/s6-rc.d/unbound/run

@@ -0,0 +1,20 @@
+#!/command/with-contenv sh
+
+set -euo pipefail
+export BF_E="${PWD##*/}/$(basename ${0})"
+
+
+#======================================================================================================================
+# Run Unbound service.
+#======================================================================================================================
+
+[[ ! -f ${UNBOUND_CONF} ]] && bf-error "Unbound configuration file not found."
+
+bf-echo "Updating root anchor."
+unbound-update-root-anchor
+
+bf-echo "Checking Unbound configuration."
+unbound-checkconf ${UNBOUND_CONF}
+
+bf-echo "Starting Unbound in daemon mode."
+unbound -c ${UNBOUND_CONF} -d

overlay/etc/s6-overlay/s6-rc.d/unbound/type

@@ -0,0 +1 @@
+longrun

overlay/tmp/UNBOUND_BUILD

@@ -0,0 +1 @@
+1.17.1-r1

overlay/tmp/UNBOUND_MAJOR

@@ -0,0 +1 @@
+1

overlay/tmp/UNBOUND_MINOR

@@ -0,0 +1 @@
+1.17

overlay/tmp/UNBOUND_REVISION

@@ -0,0 +1 @@
+1.17.1

overlay/tmp/install

@@ -0,0 +1,38 @@
+#!/bin/sh
+
+set -euo pipefail
+export BF_E=`basename ${0}`
+
+
+#======================================================================================================================
+# Add Unbound user.
+#======================================================================================================================
+
+bf-adduser unbound
+
+
+#======================================================================================================================
+# Get Unbound version.
+#======================================================================================================================
+
+cd /tmp
+
+VERSION=$(cat UNBOUND_BUILD)
+bf-echo "Unbound version ${VERSION}."
+
+
+#======================================================================================================================
+# Install Unbound and dependencies.
+#======================================================================================================================
+
+bf-echo "Installing Unbound v${VERSION}..."
+apk add --no-cache \
+    unbound=${VERSION}
+bf-done
+
+
+#======================================================================================================================
+# Cleanup.
+#======================================================================================================================
+
+bf-done

overlay/usr/bin/bf/healthcheck

@@ -0,0 +1,11 @@
+#!/command/with-contenv sh
+
+set -euo pipefail
+export BF_E=`basename ${0}`
+
+
+#======================================================================================================================
+# Attempt to connect to the local Samba server.
+#======================================================================================================================
+
+drill @127.0.0.1 cloudflare.com || exit 1

overlay/usr/bin/bf/unbound-update-root-anchor

@@ -0,0 +1,11 @@
+#!/command/with-contenv sh
+
+set -euo pipefail
+export BF_E=`basename ${0}`
+
+
+#======================================================================================================================
+# Update root anchor.
+#======================================================================================================================
+
+unbound-anchor -v -a ${UNBOUND_TRUSTED_KEY}