is this in docker, or on an encrypted filesystem?