* wip * docker a dep; call as `docker lock` * fix the tests * ca-certs --------- Co-authored-by: Jacob Heider <jacob@tea.xyz>