pull root docker image if needed