This repository is used to produce a custom Zonemaster CLI Docker image. That being the CLI version of https://zonemaster.net/.
Do note there (now) also exists an official zonemaster/cli image. See the Zonemaster CLI README for more info.
We have AFNIC and The Swedish Internet Foundation to thank for the Zonemaster project.
docker run --rm --user=4848 --cap-drop=all --security-opt=no-new-privileges --read-only --tty ghcr.io/andreaso/zonemaster-cli:2024.1-2 --help
docker run --rm --user=4848 --cap-drop=all --security-opt=no-new-privileges --read-only --network=host --tty ghcr.io/andreaso/zonemaster-cli:2024.1-2 DOMAIN
(Suggesting --network=host
since it's more likely to have IPv6 connectivity by default.)
This Docker image uses a custom Zonemaster profile which differs from the default in that the nameserver03 AXFR test is skipped. Partly because arbitrary AXFR queries can potentially be seen as noisy or impolite. Partly because it's not a configuration issue I'm overly concerned about once you get past your initial setup.
Likewise is the nameserver15 version test skipped, since I don't care whatever a nameserver exposes its software version or not.
There is also a crude attempt being made to autodetect whatever the container running this image is capable of doing IPv6 queries or not.
The Docker image is tagged according to corresponding Zonemaster release.