first pass at Dockerfile (for panamax)