ah, /var/lib/docker needs to be a volume...