deisctl encapsulated as a docker image