docker: initial support