diff --git a/dankclaw/dnsmasq/Containerfile b/dankclaw/dnsmasq/Containerfile
index d73ea1b..dbf71e5 100644
--- a/dankclaw/dnsmasq/Containerfile
+++ b/dankclaw/dnsmasq/Containerfile
@@ -2,3 +2,5 @@
 # Build on dankclaw:  podman build -t localhost/dnsmasq:latest -f Containerfile .
 FROM alpine:3.20
 RUN apk add --no-cache dnsmasq
+# -k keeps dnsmasq in the foreground (PID 1) so the container stays up.
+CMD ["/usr/sbin/dnsmasq", "-k", "-C", "/etc/dnsmasq.conf"]