[kccqzy]

You can obtain a certificate by running let's encrypt's docker image, which seems to contain a python web server just to do the validation.

[sandGorgon]

cannot run a docker inside a docker. the problem is not running a webserver, the problem is the race condition which needs to be solved when docker starts up.