docker: fix provision