dockerfile: force a cache miss so that packages are updated
readme: add note on changing security context of mounted volumes with selinux