diff --git a/modules/openstack_project/manifests/infracloud/base.pp b/modules/openstack_project/manifests/infracloud/base.pp
new file mode 100644
index 0000000000..7755171536
--- /dev/null
+++ b/modules/openstack_project/manifests/infracloud/base.pp
@@ -0,0 +1,10 @@
+# == Class: openstack_project::infracloud::base
+#
+# A template host with no running services
+#
+class openstack_project::infracloud::base (
+) {
+  class { '::unbound':
+    install_resolv_conf => true,
+  }
+}
diff --git a/modules/openstack_project/manifests/infracloud/compute.pp b/modules/openstack_project/manifests/infracloud/compute.pp
index 7ad05202ed..fc5ab3ab4f 100644
--- a/modules/openstack_project/manifests/infracloud/compute.pp
+++ b/modules/openstack_project/manifests/infracloud/compute.pp
@@ -7,6 +7,8 @@ class openstack_project::infracloud::compute (
   $br_name,
   $controller_public_address,
 ) {
+  include ::openstack_project::infracloud::base
+
   class { '::infracloud::compute':
     nova_rabbit_password          => $nova_rabbit_password,
     neutron_rabbit_password       => $neutron_rabbit_password,
diff --git a/modules/openstack_project/manifests/infracloud/controller.pp b/modules/openstack_project/manifests/infracloud/controller.pp
index 4960332cfd..8eb8b03d88 100644
--- a/modules/openstack_project/manifests/infracloud/controller.pp
+++ b/modules/openstack_project/manifests/infracloud/controller.pp
@@ -24,6 +24,8 @@ class openstack_project::infracloud::controller (
   $neutron_subnet_gateway,
   $neutron_subnet_allocation_pools,
 ) {
+  include ::openstack_project::infracloud::base
+
   class { '::infracloud::controller':
     keystone_rabbit_password         => $keystone_rabbit_password,
     neutron_rabbit_password          => $neutron_rabbit_password,