a docker image that can take on the contract of a service