Job dns-primary-git

README

Skip to build

Authoritative DNS server

This is a MirageOS unikernel which is an authoritative DNS server on port 53 (TCP and UDP). The data to be served is pulled from a git remote repository (see the ssh branch for git-via-ssh). The server supports dynamic updates (NSUPDATE), zone transfer (AXFR and IXFR), all cryptographically authenticated and integrity protected with TSIG (HMAC with a pre-shared secret).

The git remote is expected to contain a flat file hierarchy where each zone to be served is a separate file. HMAC secrets are stored as DNSKEY entries in _keys zones (i.e. example.com._keys or _keys).

This can be used with dns-secondary, and let's encrypt for automated provisioning of let's encrypt certificates.

Installation from source

To install this unikernel from source, you need to have opam (>= 2.0.0) and ocaml (>= 4.07.0) installed. Also, mirage is required (>= 3.10.6). Please follow the installation instructions.

The following steps will clone this git repository and compile the unikernel:

$ git clone https://github.com/roburio/dns-primary-git.git
$ mirage configure -t <your-favourite-target>
$ make depend
$ make

Installing as binary

Binaries are available at Reproducible OPAM builds, see Deploying binary MirageOS unikernels and Reproducible MirageOS unikernel builds for details.

Questions?

Please open an issue if you have questions, feature requests, or comments.

Build 2021-10-06 22:40:41Z

Back to readme

Built on platform freebsd-12

Build took 17min40s.

Execution result: exited 0.

Build info

Build artifacts

bin/primary_git.hvt
SHA256:996fc7679cd07b91f31b7e22100c240fbf633ff713df9ffa2e1e64b8de80bab0 (11.3MB)
build-environment
SHA256:2979406e1278a8aeca516f6e5a3a19bbfa2a67c9f805b790f247c5a32d3d12cb (263B)
opam-switch
SHA256:8dc834686f83c9c1584a9a63a92c178163515ce6bff9d681c1b15f7e0a7c3ba4 (283kB)
primary_git.hvt.debug
SHA256:4c2b4af3726bd0172fd4dcb06a661e1ff32fb645900c12892254c7e66961ff9f (16.5MB)
system-packages
SHA256:d89011ba73d5c722fa9ea9c21907d457281d714c933a50ed0bb2f700a3b2517d (254B)

Reproduced by 0 builds

Comparisons with other builds on the same platform