docker: consider an agent container for accessing docker's layer files
Instead of giving beiran root access, we could have an agent that can be runned as a container, with access to /var/lib/docker.
We can have varieties for each storage driver, eg. overlay2, aufs, etc.
They can get the file list, mappings etc. and help beiran access them
Things to solve;
- Can we be sure that we will always have easy network access between this agent and beiran?
- Also if beiran is deployed on kubernetes (w/docker), agent and beiran should be on the same pod.
- We need the interface definition