I want to at least have the smell of reproducible builds, so I'll make the image build using the lockfile. Otherwise the build-time dependency information gets lost.
