Merge pull request #205 from Luzilla/helm-chart

Update(unbound): add a small image + workflow to verify

.docker/unbound/README.md

@@ -0,0 +1,3 @@
+# unbound
+
+A small pre-configured container to support the deployment of dnsbl-exporter.

.docker/unbound/rootfs/.dockerignore

@@ -0,0 +1 @@
+# todo

.docker/unbound/rootfs/Dockerfile

@@ -0,0 +1,9 @@
+FROM alpinelinux/unbound:latest
+
+RUN apk add --update bind-tools drill
+ADD https://www.internic.net/domain/named.cache /etc/unbound/root.hints
+ADD . /
+
+RUN unbound-checkconf
+
+EXPOSE 5353/udp

.docker/unbound/rootfs/etc/unbound/unbound.conf

@@ -0,0 +1,41 @@
+server:
+    username: unbound
+    port: 5353
+    verbosity: 1
+    interface: 0.0.0.0@5353
+    do-ip4: yes
+    do-ip6: no
+    do-udp: yes
+    do-tcp: no
+    prefer-ip4: yes
+    prefer-ip6: no
+    do-daemonize: no
+    access-control: 0.0.0.0/0 allow
+    logfile: ""
+    use-syslog: no
+    log-queries: yes
+    hide-identity: yes
+    hide-version: yes
+    harden-glue: yes
+    harden-dnssec-stripped: yes
+    use-caps-for-id: yes
+    cache-min-ttl: 3600
+    cache-max-ttl: 86400
+    prefetch: yes
+    num-threads: 4
+    msg-cache-slabs: 8
+    rrset-cache-slabs: 8
+    infra-cache-slabs: 8
+    key-cache-slabs: 8
+    rrset-cache-size: 256m
+    msg-cache-size: 128m
+    so-rcvbuf: 1m
+    private-address: 192.168.1.0/16
+    unwanted-reply-threshold: 10000
+    do-not-query-localhost: no
+    val-clean-additional: yes
+root-hints: "/etc/unbound/root.hints"
+forward-zone:
+    name: "."
+    forward-addr: 9.9.9.9
+    forward-addr: 149.112.112.112

.github/workflows/pr.yml

@@ -4,32 +4,44 @@ on:
   pull_request:
 
 jobs:
+  build_unbound:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - uses: docker/setup-qemu-action@v3
+    - uses: docker/setup-buildx-action@v3
+    - uses: docker/build-push-action@v5
+      with:
+        context: .docker/unbound/rootfs
+        push: false
+        tags: ghcr.io/luzilla/unbound:dev
+
   test:
     strategy:
       matrix:
         go-version: [1.20.x]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
-        with:
-          go-version: ${{ matrix.go-version }}
-          cache: false
-      - run: go test ./...
+    - uses: actions/checkout@v4
+    - uses: actions/setup-go@v5
+      with:
+        go-version: ${{ matrix.go-version }}
+        cache: false
+    - run: go test ./...
 
   release_test:
     needs: test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
-        with:
-          go-version-file: go.mod
-          cache: false
-      - uses: docker/setup-qemu-action@v3
-      - uses: docker/setup-buildx-action@v3
-      - run: docker buildx ls
-      - uses: goreleaser/goreleaser-action@v5
-        with:
-          version: latest
-          args: release --snapshot --clean
+    - uses: actions/checkout@v4
+    - uses: actions/setup-go@v5
+      with:
+        go-version-file: go.mod
+        cache: false
+    - uses: docker/setup-qemu-action@v3
+    - uses: docker/setup-buildx-action@v3
+    - run: docker buildx ls
+    - uses: goreleaser/goreleaser-action@v5
+      with:
+        version: latest
+        args: release --snapshot --clean