Dockerfile: add apt-update, switch to curl