Unbound Cookbook

Installs and manages the unbound DNS server.

• http://unbound.net

Requirements

A platform with unbound available as a native package. The following platforms have unbound packaged, but note that the filesystem locations are not consistent and at this time only Linux + FHS is supported.

• Ubuntu/Debian
• Red Hat/CentOS/Fedora (requires EPEL)
• FreeBSD

Resources

unbound_install

Install unbound from package.

unbound_configure

Configures:

• unbound.conf
• forward-zone.conf
• local-zone.conf
• stub-zone.conf

For example usage see test/fixtures/cookbooks/test/recipes/configure.rb

unbound.conf

The main configuration file for unbound. Many settings in the template are controlled via properties on the unbound_configure resource. The file is located in the location specified in the dir property.

local-zone.conf

Set up local network resolver configuration with local-zone.conf.

stub-zone.conf

Edit the stub-zone.erb template to create a stub zone configuration.

forward-zone.conf

Edit the forward-zone.erb template to create a forward zone configuration.

Recipes

default

Installs and configures unbound using defaults.

This example recipe will load the local zone data from a data bag if present, otherwise it will attempt to use node['dns']['domain'] attribute. The various templates can be edited as required by the local user.

If this does not meet your needs use the unbound_configure resource directly.

chroot (TODO)

The intention of this recipe will be to setup the chroot environment if the chroot setting is enabled. However it is not yet complete.

remote_control (TODO)

Sets up remote control certificate attributes using the unbound configuration directory. Also creates the config file for remote-control settings and creates the certificates with unbound-control-setup.

Usage

License and Author

Copyright 2011, Joshua Timberman (cookbooks@housepub.org) Copyright 2017, Dan Webb (dan.webb@damacus.io)

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.