Start docker after lxc-net to prevent ip forwarding race

Fixes #1659