Persistent Orca runtime workspaces cannot run Testcontainers because neither a Docker client nor a Docker daemon is available. This forces test-suite work onto CI and delays diagnosis.
Add an isolated Docker-in-Docker sidecar to each Orca runtime pod, expose it only over pod-local TCP, and include the Docker CLI in the inherited DevPod toolchain.
Acceptance: docker info works inside a freshly deployed Orca runtime; a trivial container can run; no host Docker socket is mounted; chart and image validations pass.
Persistent Orca runtime workspaces cannot run Testcontainers because neither a Docker client nor a Docker daemon is available. This forces test-suite work onto CI and delays diagnosis.
Add an isolated Docker-in-Docker sidecar to each Orca runtime pod, expose it only over pod-local TCP, and include the Docker CLI in the inherited DevPod toolchain.
Acceptance: docker info works inside a freshly deployed Orca runtime; a trivial container can run; no host Docker socket is mounted; chart and image validations pass.