add test harness based on docker/lxc