Merge pull request #1 from jedisct1/master

Update

Dockerfile

@@ -12,8 +12,8 @@ RUN set -x && \
         ldnsutils \
         --no-install-recommends
 
-ENV LIBRESSL_VERSION 2.2.4
-ENV LIBRESSL_SHA256 6b409859be8654afc3862549494e097017e64c8d167f12584383586306ef9a7e
+ENV LIBRESSL_VERSION 2.2.5
+ENV LIBRESSL_SHA256 e3caded0469d8dc64f4ca2fe8e499ada4dd014e84d1c5a71818d39e54e6c914b
 ENV LIBRESSL_DOWNLOAD_URL http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-${LIBRESSL_VERSION}.tar.gz
 
 RUN set -x && \
@@ -30,8 +30,8 @@ RUN set -x && \
     echo /opt/libressl/lib > /etc/ld.so.conf.d/libressl.conf && ldconfig && \
     rm -fr /tmp/*
 
-ENV UNBOUND_VERSION 1.5.6
-ENV UNBOUND_SHA256 ad3823f5895f59da9e408ea273fcf81d8a76914c18864fba256d7f140b83e404
+ENV UNBOUND_VERSION 1.5.7
+ENV UNBOUND_SHA256 4b2088e5aa81a2d48f6337c30c1cf7e99b2e2dc4f92e463b3bee626eee731ca8
 ENV UNBOUND_DOWNLOAD_URL http://www.unbound.net/downloads/unbound-${UNBOUND_VERSION}.tar.gz
 
 RUN set -x && \
@@ -63,8 +63,8 @@ RUN set -x && \
     apt-get autoremove -y && apt-get clean && \
     rm -fr /tmp/* /var/tmp/*
 
-ENV LIBSODIUM_VERSION 1.0.6
-ENV LIBSODIUM_SHA256 940d03ea7d2caa7940e24564bf6d9f66d6edd1df1e0111ff8e3655f3b864fb59
+ENV LIBSODIUM_VERSION 1.0.7
+ENV LIBSODIUM_SHA256 7ad1e78763510c163ca48f05133057726a825cf97386c581bf12b01d7654204a
 ENV LIBSODIUM_DOWNLOAD_URL https://download.libsodium.org/libsodium/releases/libsodium-${LIBSODIUM_VERSION}.tar.gz
 
 RUN set -x && \
@@ -75,7 +75,7 @@ RUN set -x && \
     tar xzf libsodium.tar.gz && \
     rm -f libsodium.tar.gz && \
     cd libsodium-${LIBSODIUM_VERSION} && \
-    ./configure --disable-dependency-tracking --enable-minimal --prefix=/opt/libsodium && \
+    ./configure --disable-dependency-tracking --enable-minimal --enable-opt --prefix=/opt/libsodium && \
     make check && make install && \
     echo /opt/libsodium/lib > /etc/ld.so.conf.d/libsodium.conf && ldconfig && \
     rm -fr /tmp/*

README.md

@@ -66,7 +66,7 @@ Details
 
 - Caching resolver: [Unbound](https://www.unbound.net/), with DNSSEC, prefetching,
 and no logs. The number of threads and memory usage are automatically adjusted.
-Latest stable version, compiled from source.
+Latest stable version, compiled from source. qname minimisation is enabled.
 - [LibreSSL](http://www.libressl.org/) - Latest stable version, compiled from source.
 - [libsodium](https://download.libsodium.org/doc/) - Latest stable version,
 minimal build compiled from source.
@@ -81,5 +81,4 @@ Coming up next
 ==============
 
 - Namecoin support, by linking a distinct image with namecore and ncdns.
-- Metrics
 - Better isolation of the certificate signing process, in a dedicated container.

unbound.sh

@@ -47,6 +47,7 @@ server:
   do-not-query-localhost: no
   prefetch: yes
   prefetch-key: yes
+  qname-minimisation: yes
   ratelimit: 1000
   rrset-roundrobin: yes
   minimal-responses: yes