# A recursive, caching DNS resolver with some optimizations > Pull a new version of the image every 3-6 months to keep the provided root hints up to date! When starting a container, `cap_add` `NET_ADMIN` might be needed to allow the increased receive buffer size. Options: - Add additional config files to the `/srv/unbound/conf` container directory - Override the default config by mounting a `/srv/unbound/unbound.conf` file