docker: add "docker-sandbox", something like virtualenv