diff --git a/deployments/dns/bind.yaml b/deployments/dns/bind.yaml
index 9b17e8b..b0d35fc 100644
--- a/deployments/dns/bind.yaml
+++ b/deployments/dns/bind.yaml
@@ -102,17 +102,18 @@ spec:
         fsGroup: 999              # allow group access to volumes for named user
       initContainers:
         - name: fetch-root-hints
-          image: curlimages/curl:latest
+          image: alpine:latest
           command:
             - sh
             - -c
             - |
+              apk add --no-cache curl && \
               curl -sfSL https://www.internic.net/domain/named.cache -o /usr/share/dns/root.hints
-              # hold container open for debug (optional)
+              # Uncomment below to hold the container open for debugging:
               # tail -f /dev/null
           volumeMounts:
-          - mountPath: /usr/share/dns
-            name: root-hints
+            - mountPath: /usr/share/dns
+              name: root-hints
       containers:
         - name: bind-master
           image: internetsystemsconsortium/bind9:9.18
diff --git a/deployments/kustomization.yaml b/deployments/kustomization.yaml
index 28a1b43..85f0916 100644
--- a/deployments/kustomization.yaml
+++ b/deployments/kustomization.yaml
@@ -4,3 +4,4 @@ kind:       Kustomization
 resources:
   - operators/prometheus.yaml
   - operators/mariadb.yaml
+  - dns/bind.yaml