Sign inSign up

quiq/dnsmasq

By quiq

Updated 3 months ago

Minimal secure dnsmasq container

Image
1

2.2K

quiq/dnsmasq repository overview

Dockerfile:

FROM alpine:3.13

RUN apk add --no-cache dnsmasq

ENTRYPOINT ["dnsmasq", "-k"]

Features:

  • Image is signed with Notary
  • Minimal alpine image

Ansible example to verify signature and run in read-only container

- set_fact:
    dnsmasq_version: 2.84-r0
- name: Pull docker images with signature check
  command: docker pull {{item}}
  with_items:
    - quiq/dnsmasq:{{dnsmasq_version}}
  environment:
    DOCKER_CONTENT_TRUST: 1
  register: docker_pull
  changed_when: '"Downloaded newer image" in docker_pull.stdout'

-name: Start dnsmasq docker container
  docker_container:
    name: dnsmasq
    labels: {"name": "dnsmasq"}
    image: quiq/dnsmasq:{{dnsmasq_version}}
    command: --except-interface=lo --bind-interfaces --log-facility=- -q --pid-file --no-resolv -H /etc/dnsmasq.hosts
    state: started
    restart_policy: always
    network_mode: host
    capabilities: NET_ADMIN
    read_only: True
    volumes:
      - /opt/dnsmasq/dnsmasq.hosts:/etc/dnsmasq.hosts:ro

Tag summary

Content type

Image

Digest

sha256:0a8865129

Size

3.9 MB

Last updated

3 months ago

docker pull quiq/dnsmasq