Hard for docker, easy for systemd service.