grepular/pdns-auth-trimmed repository overview

⁠Hardened PowerDNS Authoritative Server

A hardened, minimal image of PowerDNS Authoritative Server⁠, with feature parity with the official image by default (three backends and the diagnostic tools are dropped). The official image is 261 MB and 6,393 files; this one is about 45 MB and 34 files: static musl binaries on scratch, running as a non-root user with no capabilities. A launcher derives Landlock filesystem and network rules from your pdns.conf before the server starts, and a published seccomp profile blocks tricks like memfd_create. Amd64 and arm64.

The two release trains PowerDNS still fixes are rebuilt automatically and signed with cosign; each image gets GitLab release notes generated from its SBOM. For most deployments, follow a release train with X.Y. Pin X.Y.Z_<hash> for an exact image that never moves. Avoid latest, which will eventually cross a release train unattended.

• Source: https://gitlab.com/grepular/pdns-auth-trimmed⁠
• Upstream: https://www.powerdns.com⁠
• License: GNU AGPL V3 (this repo; bundled third-party software under its own terms)
• Author: Mike Cardwell - https://www.grepular.com⁠

Hire me⁠ · Blog⁠ · RSS feed⁠

⁠Support/Appreciate my work

• Bitcoin⁠: 1PQLtWnjUi1itHLG6QCQeHM3Nxua8pRsq1
• Paypal⁠
• Buy me a Coffee⁠