docker: common pitfalls