you'd probably need to either use a sidecar injection mechanism like mutagen, or you would have to pass thru the filesystem to the underlying vm at a high enough level such that docker could access all the directories.