Extract dnsmasq into a separate container.