Work around tmpfs-mounted /run

Create /var/run/sshd AND run sshd in the same command line, rather than
creating it in the docker build phase.