Personally, I'd consider any Docker image that does its own DNS resolution outside of the OS a Trojan.