use shared-blob = off for docker