design notes on running timeout inside/outside the docker container