shell out to docker