add dnsutils (for 'dig')
move to separate line for better caching