(Note that Docker "repeatability" is kind of sketchy, because it shoves timestamps all over the place, which I hear is one of the things the way k8s builds has over docker)