adds pal-docker sandbox env