From your explainations, that points to a cookie handling / session storage issue which might be related with your docker environment settings or any proxy server in between might be stripping of the cookies.
When you click the login button, server sends a set cookie response in the first XAS packet. You can check what cookie is your server setting by opening browser's dev tools (F12) -> Network Tab -> first XAS request after you click login button. If there is no domain in the set cookie message, your browser may assume it is a cookie for localhost. but since you are accessing the VM via IP/FDQN name, this means it is a cross site cookie.
Since 2020 (chrom 80+) if cookie is cross site (SameSite=None) it must have Secure parameter. Otherwise chrome will not accept that cookie. If there is a Secure parameter, then you need to access to the server via https otherwise cookie is not accepted by the browser.