docker run --rm -ti \
  --device=/dev/snd/controlC0 --device=/dev/snd/pcmC0D0p --device=/dev/sndpcmC0D1p --device=/dev/snd/timer \
  -p 4713:4713 \
  rpi-deb-pulse \
  /bin/bash -c "groupadd --gid $(ls -l /dev/snd/controlC0 | cut -d' ' -f4 | xargs getent group | cut -d: -f3) alsadev \
    && gpasswd -a pulse alsadev \
    && pulseaudio --system --high-priority --no-cpu-limit -v \
      -L 'module-alsa-sink device=hw:0,0' \
      -L 'module-native-protocol-tcp auth-ip-acl=10.2.0.0/24'"