provision/docker: improve error reporting in runCmd