first cut at DockerRunner