image: unbound
network: true
config:
capabilities:
- CAP_NET_BIND_SERVICE
ipc: new
pid: new
uts: new
arches:
- amd64