That sounds right. There's a cypress image that includes browsers readily available out there I think. You could write your own Dockerfile that uses that image as a base and install what you need for OpenVPN to work