Actually, the migration should be running from the nostream image.. not the db image.. does that make sense? The app container just needs a network connection to the db to run a migration, not run on the db image.. (in addition to making sure it doesn't strip the code out of the nostream image).