Move TUN device creation to Dockerfile