implement building in privileged docker container