Tutorial: How to install Unbound on Fedora CoreOS Latest

Introduction

Unbound is a free and open-source DNS resolver that is designed to be fast and secure. It is available for various Linux distributions, including Fedora CoreOS. This tutorial will guide you through the process of installing Unbound from the official Unbound website on Fedora CoreOS Latest.

Prerequisites

A running instance of Fedora CoreOS Latest
Root privileges

Step-by-Step Guide

Step 1: Install the necessary dependencies

Before installing Unbound, you need to install some necessary dependencies. Open the terminal and run the following command:

$ sudo dnf install libevent openssl libuv-devel

Step 2: Download and extract the Unbound package

Go to the official Unbound website (https://unbound.net/) and download the latest version of Unbound (currently 1.13.0). You can use the following command to download the package:

$ curl -O https://nlnetlabs.nl/downloads/unbound/unbound-1.13.0.tar.gz

After the download is complete, extract the package using the following command:

$ tar -xvf unbound-1.13.0.tar.gz

Step 3: Build and install Unbound

Navigate to the extracted directory and build the package using the following command:

$ cd unbound-1.13.0/
$ ./configure
$ make

If there are no errors, install Unbound using the following command:

# make install

Step 4: Configure Unbound

Create a new configuration file for Unbound by copying the example configuration file provided with the package:

# cp -v /usr/local/share/doc/unbound/unbound.conf.example /usr/local/etc/unbound/unbound.conf

After that, edit the configuration file to add your DNS settings. For example, you can add the following settings to use Cloudflare DNS:

server:
  interface: 0.0.0.0
  access-control: 0.0.0.0/0 allow
  do-tcp: yes

remote-control:
  control-enable: yes

forward-zone:
  name: "."
  forward-addr: 1.1.1.1@853#cloudflare-dns.com
  forward-addr: 1.0.0.1@853#cloudflare-dns.com

Step 5: Start Unbound and enable at boot

Start Unbound using the following command:

# systemctl start unbound

Enable Unbound to start automatically at boot using the following command:

# systemctl enable unbound

Step 6: Verify that Unbound is working

To verify that Unbound is working correctly, you can use the dig command to query a DNS record:

$ dig @127.0.0.1 google.com

If Unbound is working correctly, you should get a response with the Google IP address.

Conclusion

You have successfully installed Unbound on Fedora CoreOS Latest and configured it to use a DNS resolver. With Unbound, your DNS queries are secure and fast, and you have full control over your DNS settings.