Reacting to various security concerns  I have adjusted Dockerfile to the template
At the price of an additional command @ container start.
It is now: 

$ docker-compose up -d
$ docker-compose exec -u root iris / is adjusted, 
Video is unchanged (to hide the additional grey hairs) .

This is an excellent application.
- It allows to create a base configuration and handle variants.
- And it's an excellent readable and easy-to-understand documentation.
- On top, it is JSON based and therefore well suited to source and version management

The original CachéParameterFile iris.cpf  does a mimic of versioning.
But it is buried deep into the  installation directory and as cryptic as the
Egyptian Book of the Dead. [reserved to the priest of IRIS cultus]  wink

I was waiting for something similar useful for decades!
I suggest: 

No one running and supporting more than 2 configurations should miss it!

<ctrl>+C doesn't work anymore   . 
I had to kill terminal or process

I'll step back

Great hint! 
Up to now I just used select text >  right click "copy + paste"

Why not take advantage of what is there and what is still working well.
You can't get all the %R*.int and %G*.int routines in Studio (no idea about VSCode)
But a closer look to the well know system globals and a ZLOAD brings those zombies back to life. 

@Alexey Maslov 
Following your suggestion, I investigated public key bases authentication.
And it's of course available (no surprise it's standard Linux)

$ cd /etc/ssh
$ ls -l
total 580
-rw-r--r-- 1 root root 553122 Mar  4  2019 moduli
-rw-r--r-- 1 root root   1580 Mar  4  2019 ssh_config
-rw------- 1 root root    227 Apr 20 20:32 ssh_host_ecdsa_key
-rw-r--r-- 1 root root    179 Apr 20 20:32
-rw------- 1 root root    411 Apr 20 20:32 ssh_host_ed25519_key
-rw-r--r-- 1 root root     99 Apr 20 20:32
-rw------- 1 root root   1679 Apr 20 20:32 ssh_host_rsa_key
-rw-r--r-- 1 root root    399 Apr 20 20:32

- These keys change with every run of a docker build
- the client side varies with the platform, client type, .... and is rather tricky
  It is for sure beyond the bounds of this demo

For production, it makes sense, but not for download and run within 4 minutes.

Just great! I like it.  yes
with a solid partition / session under the feet. no local stuff, not browsers !
(btw. I had something similaar in mind but this is much better)