agent can be in its own container cuz netlink :))