combo docker + puppet provisioning