Yay for tiny Linux userspaces.
I want to at least have the smell of reproducible builds, so I'll make the image build using the lockfile. Otherwise the build-time dependency information gets lost.