1:9.11.37-1+ubuntu20.04.1+isc+1

Dockerfile

@@ -4,14 +4,23 @@ MAINTAINER BIND 9 Developers <bind9-dev@isc.org>
 ENV DEBIAN_FRONTEND noninteractive
 ENV LC_ALL C.UTF-8
 
-RUN apt-get -qqqy update
-RUN apt-get -qqqy install apt-utils software-properties-common
-RUN add-apt-repository -y ppa:isc/bind
+ARG DEB_VERSION=1:9.11.37-1+ubuntu20.04.1+isc+1
+
+# Install add-apt-repository command
 RUN apt-get -qqqy update
 RUN apt-get -qqqy dist-upgrade
-RUN apt-get -qqqy install bind9 bind9-utils
+RUN apt-get -qqqy install --no-install-recommends apt-utils software-properties-common dctrl-tools
 
-VOLUME ["/etc/bind", "/var/cache/bind", "/var/lib/bind", "/var/log", "/run/named"]
+# Add the BIND 9 APT Repository
+RUN add-apt-repository -y ppa:isc/bind-esv
+
+# Install BIND 9
+RUN apt-get -qqqy update
+RUN apt-get -qqqy dist-upgrade
+RUN apt-get -qqqy install bind9=$DEB_VERSION bind9utils=$DEB_VERSION
+
+# Now remove the pkexec that got pulled as dependency to software-properties-common
+RUN apt-get --purge -y autoremove policykit-1
 
 RUN mkdir -p /etc/bind && chown root:bind /etc/bind/ && chmod 755 /etc/bind
 RUN mkdir -p /var/cache/bind && chown bind:bind /var/cache/bind && chmod 755 /var/cache/bind
@@ -19,6 +28,8 @@ RUN mkdir -p /var/lib/bind && chown bind:bind /var/lib/bind && chmod 755 /var/li
 RUN mkdir -p /var/log/bind && chown bind:bind /var/log/bind && chmod 755 /var/log/bind
 RUN mkdir -p /run/named && chown bind:bind /run/named && chmod 755 /run/named
 
+VOLUME ["/etc/bind", "/var/cache/bind", "/var/lib/bind", "/var/log"]
+
 EXPOSE 53/udp 53/tcp 953/tcp
 
 CMD ["/usr/sbin/named", "-g", "-c", "/etc/bind/named.conf", "-u", "bind"]

named.conf

@@ -1,19 +0,0 @@
-// This is the primary configuration file for the BIND DNS server named.
-
-options {
-	directory "/var/cache/bind";
-	dnssec-validation auto;
-	listen-on-v6 { any; };
-};
-
-logging {
-	channel default_log {
-		file "/var/log/bind/default.log" versions 3 size 20m;
-		print-time yes;
-		print-category yes;
-		print-severity yes;
-		severity info;
-	};
-	category default { default_log; };
-	category unmatched { null; };
-};