Resolve .local mDNS domains via avahi using unbound

I want local applications (e.g.: SSH, Firefox, etc) to resolve .local domains
using mDNS, so that devices can find each other via multicast.1

I run Unbound as a DNS resolve, and I will configure it to delegate the .local
to a avahi2dns. avahi2dns uses D-Bus to talk to Avahi for the actual resolution.
There are several layers and processes involved due to the lack of a dedicated
solution: an mDNS proxy which just exposes a local DNS interface.

Setup[permalink]

Configure unbound to resolve .local domains using mDNS via avahi.

Add the following to /etc/unbound/unbound.conf.d/avahi-local.conf:

Finally, reload unbound:

1.
This can be insecure on networks with untrusted hosts. It is important that
both parties properly authenticate each other: by using known SSH host keys,
a trusted CA for TLS, etc. ↩︎