Add confine.version, shrink rootfs size