Merge pull request #716 from cybozu-go/embed-root-hints

Embed root.hints file in unbound container
cybozu-go · Mar 29, 2024 · 7d544a4 · 7d544a4
2 parents 9d615b6 + 32e76fe
commit 7d544a4
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 3 deletions.
diff --git a/images.go b/images.go
@@ -15,7 +15,7 @@ const (
 	ToolsImage           = Image("ghcr.io/cybozu-go/cke-tools:1.27.1")
 	PauseImage           = Image("ghcr.io/cybozu/pause:3.9.0.4")
 	CoreDNSImage         = Image("ghcr.io/cybozu/coredns:1.11.1.2")
-	UnboundImage         = Image("ghcr.io/cybozu/unbound:1.18.0.2")
+	UnboundImage         = Image("ghcr.io/cybozu/unbound:1.18.0.4")
 	UnboundExporterImage = Image("ghcr.io/cybozu/unbound_exporter:0.4.4.2")
 )
 

diff --git a/op/nodedns/nodedns.go b/op/nodedns/nodedns.go
@@ -69,6 +69,7 @@ server:
   local-zone: "29.172.in-addr.arpa." transparent
   local-zone: "30.172.in-addr.arpa." transparent
   local-zone: "31.172.in-addr.arpa." transparent
+  root-hints: "/usr/local/unbound/etc/unbound/root.hints"
   trust-anchor-file: "/usr/local/unbound/etc/unbound/root.key"
   domain-insecure: "{{ .Domain }}"
   domain-insecure: "10.in-addr.arpa."

diff --git a/static/resources.go b/static/resources.go