fabfile: docker task