redo with the samba-server having less priv - there is no reason for it to have access to docker - its both unsafe, and increases the complexity