[Dockerfile] push apt update and install into same layer