annotated dockerfile