upgrade to chef-docker 0.28.0 for new :pull behavior