turn CMD of baseimage into JSON form in order to catch signals

see <https://github.com/docker/docker/issues/3766>