A completely closed source docker container

An obfuscation-based only solution would not be enough, as "Encrypted and secure docker containers" details.

You would need full control of the host your containers are running in order to prevent any "poking". And that is not the case in your scenario, where a developer does have access to the host (ie his/her local development machine) where said container would run.