put agent in docker
it seems like openat is not the only active syscall there is?