docker: first pass on run functions