I'm going even simpler, just bare docker with a idempotent bash wrapper.