Separate venvs

wip
just the docker image :p