You could but it means: - you need to add ip2unix in your images, which is not always convenient - you still need to expose the socket outside the container (which is doable with volumes, but permissions can be a mess, especially if you use user namespaces)