run riemann inside Docker