fallback to docker exec for attach when nsenter is not available