Move Dockerfile to root and remove upgrade

For security reasons, Dockerfiles have no access to parent directories.

It's not recommended to run `apt-get upgrade` in a Dockerfile because
the base image is supposed to be updated and running upgrade in the
Dockerfile reduced the copy-on-write filesystem savings and increases
the time to build.