we've had a few people not realise that each instruction is run in a new container, which is then docker commited, and then the next is run using that new image.