Zonemaster, an open source DNS delegation and DNSSEC health checker, ready on first boot.
Zonemaster is an open source DNS delegation and DNSSEC quality checker, maintained jointly by The Swedish Internet Foundation and AFNIC. Give it a domain and it runs the full Zonemaster test suite across the address, basic, connectivity, consistency, delegation, DNSSEC, nameserver, syntax and zone modules, then returns a graded report with info, notice, warning, error and critical findings, so you can see exactly what is right and wrong with a zone's delegation and DNSSEC. Registrars, hosting providers and DNS operators use it to validate delegations, catch broken or expiring DNSSEC and check zones before and after changes, from a web GUI or a JSON-RPC API.
cloudimg ships Zonemaster hardened and fully patched on Ubuntu 24.04 as the official all in one container, pinned by digest and captured into the image so it starts in seconds. Because Zonemaster has no built in login and its public instances are open, cloudimg fronts the web GUI with a unique HTTP Basic Auth credential generated on each virtual machine on first boot, and keeps the backend API, the test agent and the results database inside the container, never exposed on a routable port. It comes with a paired deployment guide and 24/7 cloudimg support.
Real screenshots taken while testing this image against its deployment guide.