providers/docker: process-level lock on host machine up