avoid needing to bind running images to public ports