Zonemaster Docker image

This repository is used to produce a custom Zonemaster CLI Docker image. That being the CLI version of https://zonemaster.net/.

Do note there (now) also exists an official zonemaster/cli image. See the Zonemaster CLI README for more info.

We have AFNIC and The Swedish Internet Foundation to thank for the Zonemaster project.

Usage

docker run --rm --user=4848 --cap-drop=all --security-opt=no-new-privileges --read-only --tty ghcr.io/andreaso/zonemaster-cli:2023.2.1-1 --help

docker run --rm --user=4848 --cap-drop=all --security-opt=no-new-privileges --read-only --network=host --tty ghcr.io/andreaso/zonemaster-cli:2023.2.1-1 DOMAIN

(Suggesting --network=host since it's more likely to have IPv6 connectivity by default.)

Custom profile

This Docker image uses a custom Zonemaster profile which differs from the default in that the nameserver03 AXFR test is skipped. Partly because arbitrary AXFR queries can potentially be seen as noisy or impolite. Partly because it's not a configuration issue I'm overly concerned about once you get past your initial setup.

There is also a crude attempt being made to autodetect whatever the container running this image is capable of doing IPv6 queries or not.

Versioning

The Docker image is tagged according to corresponding Zonemaster release.