Add db:migrate init hook
Disable sshd
Lock base image version