Why isn't this the way docker works?