Unbound Cookbook

Installs and manages the unbound DNS server.

• http://unbound.net

Maintainers

This cookbook is maintained by the Sous Chefs. The Sous Chefs are a community of Chef cookbook maintainers working together to maintain important cookbooks. If you’d like to know more please visit sous-chefs.org or come chat with us on the Chef Community Slack in #sous-chefs.

Requirements

Platform

A platform with unbound available as a native package. The following platforms have unbound packaged, but note that the filesystem locations are not consistent and at this time only Linux + FHS is supported.

• Ubuntu/Debian
• Red Hat/CentOS/Fedora (requires EPEL)
• FreeBSD

Chef

• Chef 12.7+

Resources

unbound_install

Install unbound from package.

unbound_configure

Configures:

• unbound.conf
• forward-zone.conf
• local-zone.conf
• stub-zone.conf

For example usage see test/fixtures/cookbooks/test/recipes/configure.rb

unbound.conf

The main configuration file for unbound. Many settings in the template are controlled via properties on the unbound_configure resource. The file is located in the location specified in the dir property.

local-zone.conf

Set up local network resolver configuration with local-zone.conf.

stub-zone.conf

Edit the stub-zone.erb template to create a stub zone configuration.

forward-zone.conf

Edit the forward-zone.erb template to create a forward zone configuration.

Recipes

default

Installs and configures unbound using defaults.

This example recipe will load the local zone data from a data bag if present, otherwise it will attempt to use node['dns']['domain'] attribute. The various templates can be edited as required by the local user.

If this does not meet your needs use the unbound_configure resource directly.

chroot (TODO)

The intention of this recipe will be to setup the chroot environment if the chroot setting is enabled. However it is not yet complete.

remote_control (TODO)

Sets up remote control certificate attributes using the unbound configuration directory. Also creates the config file for remote-control settings and creates the certificates with unbound-control-setup.

Contributors

This project exists thanks to all the people who contribute.

Backers

Thank you to all our backers!

Sponsors

Support this project by becoming a sponsor. Your logo will show up here with a link to your website.