Docker entry process must block