dockerfile: do not perform system upgrades