in so many cases, docker is more than sufficient for major agent workloads... with no hostile users of course