Add unbound package.

Signed-off-by: Dan Lorenc <dlorenc@chainguard.dev>

Makefile

@@ -552,6 +552,7 @@ $(eval $(call build-package,ratelimit,0.0_git20230331-r0))
 $(eval $(call build-package,logstash,8.7.0-r0))
 $(eval $(call build-package,ntpd-rs,0.2.1-r0))
 $(eval $(call build-package,trust-dns,0.22.0-r0))
+$(eval $(call build-package,unbound,1.17.1-r0))
 
 .build-packages: ${PACKAGES}
 

unbound.yaml

@@ -0,0 +1,55 @@
+package:
+  name: unbound
+  version: 1.17.1
+  epoch: 0
+  description: "Unbound is a validating, recursive, and caching DNS resolver."
+  copyright:
+    - license: BSD-3-Clause
+environment:
+  contents:
+    packages:
+      - wolfi-base
+      - busybox
+      - ca-certificates-bundle
+      - build-base
+      - openssl-dev
+      - expat-dev
+      - libevent-dev
+      - libsodium-dev
+pipeline:
+  - uses: git-checkout
+    with:
+      repository: https://github.com/NLnetLabs/unbound
+      expected-commit: 90831af981221bbce1cd7b15055562336760e484
+      tag: release-${{package.version}}
+  - uses: autoconf/configure
+    with:
+    opts: |
+      --with-libevent \
+      --with-expat \
+      --enable-dnscrypt
+  - uses: autoconf/make
+  - uses: autoconf/make-install
+  - uses: strip
+subpackages:
+  - name: unbound-doc
+    description: unbound manpages
+    pipeline:
+      - uses: split/manpages
+  - name: "unbound-dev"
+    description: "headers for unbound"
+    pipeline:
+      - uses: split/dev
+  - name: "unbound-libs"
+    description: "libraries for unbound"
+    pipeline:
+      - runs: |
+          mkdir -p ${{targets.subpkgdir}}/usr/lib
+          mv ${{targets.destdir}}/usr/lib/lib*.so.* ${{targets.subpkgdir}}/usr/lib
+update:
+  enabled: true
+  github:
+    identifier: NLnetLabs/unbound
+    strip-prefix: release-
+    use-tag: true
+    tag-filter: release-