Docker done right