more dockerfile tuning