casjaysdevdocker/bind
1
0
Fork 0
mirror of https://github.com/casjaysdevdocker/bind synced 2026-07-31 20:11:38 -04:00
Code Issues Actions Packages Projects Releases Wiki Activity

🗃️ rootfs: shield internal entrypoint PID files from /run/*.pid sweeps 🗃️

Browse Source 
Update the embedded entrypoint copies in rootfs/ to match the
upstream template change. Internal state files renamed to dotfiles
so they're not matched by `/run/*.pid` cleanup globs:
- /run/init.d/entrypoint.pid -> /run/.entrypoint.pid
- /run/no_exit.pid -> /run/.no_exit.pid
- /run/backup.pid -> /run/.backup.pid
- /run/__start_init_scripts.pid -> /run/.start_init_scripts.pid
Per-service PIDs in /run/init.d/ are unchanged.

.claude/
Dockerfile
.env.scripts
.gitattributes
.gitea/workflows/docker.yaml
.gitignore
LICENSE.md
rootfs/root/docker/setup/00-init.sh
rootfs/root/docker/setup/01-system.sh
rootfs/root/docker/setup/02-packages.sh
rootfs/root/docker/setup/03-files.sh
rootfs/root/docker/setup/04-users.sh
rootfs/root/docker/setup/05-custom.sh
rootfs/root/docker/setup/06-post.sh
rootfs/root/docker/setup/07-cleanup.sh
rootfs/tmp/etc/bind/named.conf
rootfs/tmp/etc/nginx/fastcgi_params
rootfs/tmp/etc/nginx/nginx.conf
rootfs/usr/local/bin/entrypoint.sh
rootfs/usr/local/bin/pkmgr
rootfs/usr/local/etc/docker/functions/entrypoint.sh
rootfs/usr/local/etc/docker/init.d/01-tor.sh
rootfs/usr/local/etc/docker/init.d/02-named.sh
rootfs/usr/local/etc/docker/init.d/03-nginx.sh
rootfs/usr/local/etc/docker/init.d/04-php-fpm.sh
rootfs/usr/local/share/template-files/config/env/default.sample
rootfs/usr/local/share/template-files/config/env/examples/zz-entrypoint.sh
This commit is contained in:
Jason Hempstead
2026-05-05 19:11:09 -04:00
parent b542a49619
commit 8c510016c3
27 changed files with 882 additions and 621 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rootfs/tmp/etc/bind/named.conf
+29 -6
View File
@@ -1,5 +1,22 @@
# default options - https://bind9.readthedocs.io/en/latest/chapter3.html
#####################################################################
# NOTE on client source IPs:
#
# If named's query log only shows the docker bridge gateway (e.g.
# 172.17.0.1) as the client, that is a Docker NAT artifact - the default
# userland docker-proxy rewrites the source IP of forwarded UDP/TCP.
# To see real external client IPs, run the container with EITHER:
#
# docker run --network=host ... (skip port publishing)
#
# - or configure dockerd with userland-proxy disabled in
# /etc/docker/daemon.json:
# { "userland-proxy": false }
# and restart docker. iptables DNAT then preserves source IPs.
#
# bind itself sees whatever the kernel hands it; it can't recover an IP
# the proxy already discarded.
#####################################################################
# rndc keys
key "dhcp-key" { algorithm hmac-sha512; secret "REPLACE_KEY_DHCP"; };
key "rndc-key" { algorithm hmac-sha512; secret "REPLACE_KEY_RNDC"; };
@@ -18,6 +35,12 @@ acl "forward" { 1.1.1.1; 8.8.8.8; 4.4.4.4; };
controls { inet 127.0.0.1 allow { trusted; } keys { "rndc-key"; }; };
#####################################################################
options {
directory "REPLACE_VAR_DIR";
pid-file "REPLACE_RUN_DIR/named.pid";
managed-keys-directory "REPLACE_ETC_DIR/keys";
dump-file "REPLACE_DATA_DIR/stats/dump.txt";
statistics-file "REPLACE_DATA_DIR/stats/stats.txt";
memstatistics-file "REPLACE_DATA_DIR/stats/mem.txt";
version "9";
listen-on { any; };
listen-on-v6 { any; };
@@ -37,12 +60,7 @@ options {
allow-query-cache { any; };
auth-nxdomain no;
dnssec-validation auto;
directory "REPLACE_VAR_DIR";
managed-keys-directory "REPLACE_ETC_DIR/keys";
pid-file "REPLACE_RUN_DIR/named.pid";
dump-file "REPLACE_DATA_DIR/stats/dump.txt";
statistics-file "REPLACE_DATA_DIR/stats/stats.txt";
memstatistics-file "REPLACE_DATA_DIR/stats/mem.txt";
validate-except { "onion"; "exit"; };
forwarders { 1.1.1.1; 8.8.8.8; 4.4.4.4; };
};
#####################################################################
@@ -86,6 +104,11 @@ zone "." {
# ********** end root info **********
#####################################################################
# ********** begin tor forwarding **********
zone "exit" {
type forward;
forward only;
forwarders { 127.0.0.1 port 9053; };
};
zone "onion" {
type forward;
forward only;