- ProxyJump (-J) doesn't work from Docker container - Changed to nested SSH: hop -> target - Proper command escaping for nested SSH - Worker2 (srv-bd-host01) only accessible via worker1 (pve-nu-monitor01)