what's the trick to get hardlink to use sha256 in docker?