enable X11 tcp - as its only inside the container-network, and add a  command that can run containered X-apps
some Xapps to test with