Job dns-primary-git


Skip to build

Authoritative DNS server

This is a MirageOS unikernel which is an authoritative DNS server on port 53 (TCP and UDP). The data to be served is pulled from a git remote repository (see the ssh branch for git-via-ssh). The server supports dynamic updates (NSUPDATE), zone transfer (AXFR and IXFR), all cryptographically authenticated and integrity protected with TSIG (HMAC with a pre-shared secret).

The git remote is expected to contain a flat file hierarchy where each zone to be served is a separate file. HMAC secrets are stored as DNSKEY entries in _keys zones (i.e. or _keys).

This can be used with dns-secondary, and let's encrypt for automated provisioning of let's encrypt certificates.

Installation from source

To install this unikernel from source, you need to have opam (>= 2.0.0) and ocaml (>= 4.07.0) installed. Also, mirage is required (>= 3.10.6). Please follow the installation instructions.

The following steps will clone this git repository and compile the unikernel:

$ git clone
$ mirage configure -t <your-favourite-target>
$ make depend
$ make

Installing as binary

Binaries are available at Reproducible OPAM builds, see Deploying binary MirageOS unikernels and Reproducible MirageOS unikernel builds for details.


Please open an issue if you have questions, feature requests, or comments.

Build 2021-03-16 12:51:21Z

Back to readme

Built on platform freebsd-12

Build took 20min50s.

Execution result: exited 0.

Build info

Build artifacts

SHA256:1dabcad85c49aa26ccccf587bd64ece3337d87c78abae3e74a077c7c8fd4eee8 (10.3MB)
SHA256:9e2d327e244f02c988e9abfafdea110de1011bba4ef8c8ff2c63a8d7b3dc7a09 (183B)
SHA256:6ce211eb2a9ca21ef90867d4c115136a636f81e80106c7fb83a215e6f01a5108 (246kB)
SHA256:5f88914490daab46d6b675edbd9a706d25df9cc14b5020a2da39fd6638919d5f (15.3MB)
SHA256:b5ebbb33d9259ffaf18d17d183cb4e42434f134be93ef1d8eaa0597d0e16f955 (175B)

Reproduced by 3 builds

Comparisons with other builds on the same platform