separate chmod +x from execution in base/Dockerfile.tpl