put docker support in new worker system; never follow symlinks by default
fix tests