use latest nccts/baseimage
bump ver
refresh
split chmod into separate RUN
more accurage comment re: entry.sh