dockerfile: make it pass