everything run as strider except docker (root)