Docker container to test isolation such as network access, memory and CPU limits