docker: initial wip