follow advice from Docker page and limit to useful stuff