docker
global variable.
Takes an image ID or symbolic name which must already have been pulled locally
and starts a container based on that image.
Runs all nested sh
steps inside that container.
The workspace is mounted read-write into the container.