Run dnsmasq properly with its own container.