dockerfile: following docker-process best practices