use dnsmasq to resolve *.docker to the vm
run dnsmasq as user, not root
some basic code organization
optional http proxy service
this caveat no longer applies

though the fix required running nfs as root :(
v2.0.0