Bug 1088232 - mach ci-docker-run

I think all this can be replaced by `cmd_out.extend(flags.split())`