globs seem to be bashism.

Also use CMD for easy debuging. we do not pass parameters to the entrypoint
anyway.