TrueSkrillor · Oct 19, 2026
diff --git a/src/main/resources/images/baseimage/Dockerfile b/src/main/resources/images/baseimage/Dockerfile
@@ -1,7 +1,6 @@
 ARG VERSION=latest
 FROM alpine:$VERSION
-RUN apk update &&\
-  apk add git \
+RUN apk add --no-cache git \
     mercurial \
     alpine-sdk \
     gettext-dev \

diff --git a/src/main/resources/images/baseimage/Dockerfile_debian b/src/main/resources/images/baseimage/Dockerfile_debian
@@ -20,7 +20,8 @@ RUN apt-get update &&\
     rsync \
     bash \
     coreutils \
-    build-essential
+    build-essential && \
+  rm -rf /var/lib/apt/lists/*
 
 COPY ./ca.pem /etc/ssl/certs/
 WORKDIR /src/
diff --git a/src/main/resources/images/baseimage/Dockerfile_entrypoint b/src/main/resources/images/baseimage/Dockerfile_entrypoint
@@ -1,9 +1,9 @@
 FROM golang:1.14 AS build
 COPY entrypoints /build/
 WORKDIR /build
-RUN CGO_ENABLED=0 GOOS=linux go build -o ./ ./...
+# -s -w strips the symbol table and DWARF debug info from the binaries
+RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-s -w" -o ./ ./...
 
 
 FROM scratch
-COPY --from=build /build/client-entrypoint /bin/
-COPY --from=build /build/server-entrypoint /bin/
+COPY --from=build /build/client-entrypoint /build/server-entrypoint /bin/
diff --git a/src/main/resources/images/basicClient/Dockerfile b/src/main/resources/images/basicClient/Dockerfile
@@ -1,6 +1,8 @@
 FROM debian:latest
 
-RUN apt-get update && apt-get install -y openssl tcpdump
+RUN apt-get update && \
+  apt-get install -y openssl tcpdump && \
+  rm -rf /var/lib/apt/lists/*
 COPY entrypoint.sh /entrypoint/
 WORKDIR /output/
 

diff --git a/src/main/resources/images/boringssl/Dockerfile-2214-2661 b/src/main/resources/images/boringssl/Dockerfile-2214-2661
@@ -3,14 +3,13 @@ ARG VERSION
 RUN git clone --depth=1 -b ${VERSION} https://github.com/google/boringssl.git
 #remove the errorflags in CMakeLists.txt otherwise boringssl will not compile (workaround)
 #/src/boringssl/crypto/pem/pem_lib.c:460:2: warning: this 'if' clause does not guard... [-Wmisleading-indentation]
-RUN sed -i -e 's/-Wall -Werror //g' /src/boringssl/CMakeLists.txt
-RUN sed -i -e 's/-Wall -Wshadow -Werror //g' /src/boringssl/CMakeLists.txt
+RUN sed -i -e 's/-Wall -Werror //g' -e 's/-Wall -Wshadow -Werror //g' /src/boringssl/CMakeLists.txt
 WORKDIR /build/
-RUN cmake -DCMAKE_BUILD_TYPE=Release -DBUILD_SHARED_LIBS=1 /src/boringssl/
-RUN make
+RUN cmake -DCMAKE_BUILD_TYPE=Release -DBUILD_SHARED_LIBS=1 /src/boringssl/ &&\
+  make -j"$(nproc)"
 # copy all libs we need
-RUN mkdir /libdeps
-RUN cp $(LD_LIBRARY_PATH="/build/lib/" ldd /build/tool/bssl | awk '$3=="" {print $1}; $3!="" {print $3}') /libdeps/
+RUN mkdir /libdeps && \
+  cp $(LD_LIBRARY_PATH="/build/lib/" ldd /build/tool/bssl | awk '$3=="" {print $1}; $3!="" {print $3}') /libdeps/
 
 FROM entrypoint as boringssl-base2
 COPY --from=boringssl-base1 /src/boringssl/include/ /artifacts/ssllib/include/

diff --git a/src/main/resources/images/boringssl/Dockerfile-2272-2357 b/src/main/resources/images/boringssl/Dockerfile-2272-2357
@@ -3,15 +3,14 @@ ARG VERSION
 RUN git clone --depth=1 -b ${VERSION} https://github.com/google/boringssl.git
 #remove the errorflags in CMakeLists.txt otherwise boringssl will not compile (workaround)
 #/src/boringssl/crypto/pem/pem_lib.c:460:2: warning: this 'if' clause does not guard... [-Wmisleading-indentation]
-RUN sed -i -e 's/-Wall -Wshadow -Werror //g' /src/boringssl/CMakeLists.txt
-RUN sed -i -e 's/-Wall -Werror //g' /src/boringssl/CMakeLists.txt
+RUN sed -i -e 's/-Wall -Wshadow -Werror //g' -e 's/-Wall -Werror //g' /src/boringssl/CMakeLists.txt
 WORKDIR /build/
-RUN cmake -DCMAKE_BUILD_TYPE=Release -DBUILD_SHARED_LIBS=1 /src/boringssl/
 #ignore the errors while compiling, linker errors in the shim module -> shim is not working
-RUN make -i
+RUN cmake -DCMAKE_BUILD_TYPE=Release -DBUILD_SHARED_LIBS=1 /src/boringssl/ &&\
+  make -i -j"$(nproc)"
 # copy all libs we need
-RUN mkdir /libdeps
-RUN cp $(LD_LIBRARY_PATH="/build/lib/" ldd /build/tool/bssl | awk '$3=="" {print $1}; $3!="" {print $3}') /libdeps/
+RUN mkdir /libdeps && \
+  cp $(LD_LIBRARY_PATH="/build/lib/" ldd /build/tool/bssl | awk '$3=="" {print $1}; $3!="" {print $3}') /libdeps/
 
 FROM entrypoint as boringssl-base2
 COPY --from=boringssl-base1 /src/boringssl/include/ /artifacts/ssllib/include/

diff --git a/src/main/resources/images/boringssl/Dockerfile-2704-3945 b/src/main/resources/images/boringssl/Dockerfile-2704-3945
@@ -3,10 +3,10 @@ ARG VERSION
 RUN git clone --depth=1 -b ${VERSION} https://github.com/google/boringssl.git
 WORKDIR /build/
 RUN cmake -DCMAKE_BUILD_TYPE=Release -DBUILD_SHARED_LIBS=1 /src/boringssl/ &&\
-  make
+  make -j"$(nproc)"
 # copy all libs we need
-RUN mkdir /libdeps
-RUN cp $(LD_LIBRARY_PATH="/build/lib/" ldd /build/tool/bssl | awk '$3=="" {print $1}; $3!="" {print $3}') /libdeps/
+RUN mkdir /libdeps && \
+  cp $(LD_LIBRARY_PATH="/build/lib/" ldd /build/tool/bssl | awk '$3=="" {print $1}; $3!="" {print $3}') /libdeps/
 
 
 FROM entrypoint as boringssl-base2

diff --git a/src/main/resources/images/boringssl/Dockerfile-945f4a5_x509_anvil b/src/main/resources/images/boringssl/Dockerfile-945f4a5_x509_anvil
@@ -1,16 +1,18 @@
 FROM alpine-build:3.19 AS boringssl-base1
 WORKDIR /src/
 COPY x509_bssl.patch /src/x509_bssl.patch
-RUN git clone https://github.com/google/boringssl.git
 WORKDIR /src/boringssl/
-RUN git checkout 945f4a5d8fd6abf0c7471242151c727e02e889a2
-RUN git apply /src/x509_bssl.patch
+RUN git init && \
+  git remote add origin https://github.com/google/boringssl.git && \
+  git fetch --depth 1 origin 945f4a5d8fd6abf0c7471242151c727e02e889a2 && \
+  git checkout FETCH_HEAD && \
+  git apply /src/x509_bssl.patch
 WORKDIR /build/
 RUN cmake -DCMAKE_BUILD_TYPE=Release -DBUILD_SHARED_LIBS=1 /src/boringssl/ &&\
-  make
+  make -j"$(nproc)"
 # copy all libs we need
-RUN mkdir /libdeps
-RUN cp $(LD_LIBRARY_PATH="/build/lib/" ldd /build/bssl | awk '$3=="" {print $1}; $3!="" {print $3}') /libdeps/
+RUN mkdir /libdeps && \
+  cp $(LD_LIBRARY_PATH="/build/lib/" ldd /build/bssl | awk '$3=="" {print $1}; $3!="" {print $3}') /libdeps/
 
 
 FROM entrypoint AS boringssl-base2

diff --git a/src/main/resources/images/boringssl/Dockerfile-x b/src/main/resources/images/boringssl/Dockerfile-x
@@ -3,10 +3,10 @@ ARG VERSION
 RUN git clone --depth=1 -b ${VERSION} https://github.com/google/boringssl.git
 WORKDIR /build/
 RUN cmake -DCMAKE_BUILD_TYPE=Release -DBUILD_SHARED_LIBS=1 /src/boringssl/ &&\
-  make
+  make -j"$(nproc)"
 # copy all libs we need
-RUN mkdir /libdeps
-RUN cp $(LD_LIBRARY_PATH="/build/lib/" ldd /build/bssl | awk '$3=="" {print $1}; $3!="" {print $3}') /libdeps/
+RUN mkdir /libdeps && \
+  cp $(LD_LIBRARY_PATH="/build/lib/" ldd /build/bssl | awk '$3=="" {print $1}; $3!="" {print $3}') /libdeps/
 
 
 FROM entrypoint as boringssl-base2

diff --git a/src/main/resources/images/botan/Dockerfile-1_11_25-29 b/src/main/resources/images/botan/Dockerfile-1_11_25-29
@@ -1,12 +1,13 @@
 FROM alpine-build:3.6 as botan-base1
 ARG VERSION
-RUN apk add boost-dev
-RUN wget -O botan.tar.gz https://botan.randombit.net/releases/old/Botan-1.11.${VERSION}.tgz
-RUN mkdir botan
-RUN tar -xzf botan.tar.gz -C botan --strip-components 1
+RUN apk add --no-cache boost-dev
+RUN wget -O botan.tar.gz https://botan.randombit.net/releases/old/Botan-1.11.${VERSION}.tgz && \
+  mkdir botan && \
+  tar -xzf botan.tar.gz -C botan --strip-components 1 && \
+  rm botan.tar.gz
 WORKDIR botan
 RUN ./configure.py --prefix=/build/ &&\
-  make -i &&\
+  make -i -j"$(nproc)" &&\
   make install 
 RUN mv /build/lib/libbotan-1.11.so.${VERSION}.${VERSION} /build/lib/libbotan-1.11.so.${VERSION}
 

diff --git a/src/main/resources/images/botan/Dockerfile-1_11_34 b/src/main/resources/images/botan/Dockerfile-1_11_34
@@ -1,9 +1,10 @@
 FROM alpine-build:3.6 as botan-base1
-RUN wget https://botan.randombit.net/releases/old/Botan-1.11.34.tgz
-RUN tar -xzf Botan-1.11.34.tgz
+RUN wget https://botan.randombit.net/releases/old/Botan-1.11.34.tgz && \
+  tar -xzf Botan-1.11.34.tgz && \
+  rm Botan-1.11.34.tgz
 WORKDIR Botan-1.11.34
 RUN ./configure.py --prefix=/build/ &&\
-  make &&\
+  make -j"$(nproc)" &&\
   make install
 RUN mv /build/lib/libbotan-1.11.so.34.34 /build/lib/libbotan-1.11.so.34
 

diff --git a/src/main/resources/images/botan/Dockerfile-1_11_9-13 b/src/main/resources/images/botan/Dockerfile-1_11_9-13
@@ -1,12 +1,13 @@
 FROM alpine-build:3.6 as botan-base1
 ARG VERSION
-RUN apk add boost-dev
-RUN wget -O botan.tar.gz https://botan.randombit.net/releases/old/Botan-1.11.${VERSION}.tgz
-RUN mkdir botan
-RUN tar -xzf botan.tar.gz -C botan --strip-components 1
+RUN apk add --no-cache boost-dev
+RUN wget -O botan.tar.gz https://botan.randombit.net/releases/old/Botan-1.11.${VERSION}.tgz && \
+  mkdir botan && \
+  tar -xzf botan.tar.gz -C botan --strip-components 1 && \
+  rm botan.tar.gz
 WORKDIR botan
 RUN ./configure.py --prefix=/build/ &&\
-  make -s &&\
+  make -s -j"$(nproc)" &&\
   make install -s
 RUN mv /build/lib/libbotan-1.11.so.${VERSION}.${VERSION} /build/lib/libbotan-1.11.so.${VERSION}
 

diff --git a/src/main/resources/images/botan/Dockerfile-1_11_x b/src/main/resources/images/botan/Dockerfile-1_11_x
@@ -1,12 +1,13 @@
 FROM alpine-build:3.6 as botan-base1
 ARG VERSION
-RUN apk add boost-dev
-RUN wget -O botan.tar.gz https://botan.randombit.net/releases/old/Botan-1.11.${VERSION}.tgz
-RUN mkdir botan
-RUN tar -xzf botan.tar.gz -C botan --strip-components 1
+RUN apk add --no-cache boost-dev
+RUN wget -O botan.tar.gz https://botan.randombit.net/releases/old/Botan-1.11.${VERSION}.tgz && \
+  mkdir botan && \
+  tar -xzf botan.tar.gz -C botan --strip-components 1 && \
+  rm botan.tar.gz
 WORKDIR botan
 RUN ./configure.py --prefix=/build/ &&\
-  make -s &&\
+  make -s -j"$(nproc)" &&\
   make install -s
 RUN mv /build/lib/libbotan-1.11.so.${VERSION}.${VERSION} /build/lib/libbotan-1.11.so.${VERSION}
 

diff --git a/src/main/resources/images/botan/Dockerfile-2_0-10 b/src/main/resources/images/botan/Dockerfile-2_0-10
@@ -1,10 +1,11 @@
 FROM alpine-build:3.6 as botan-base1
 ARG VERSION
-RUN wget https://botan.randombit.net/releases/Botan-2.${VERSION}.tgz
-RUN tar -xzf Botan-2.${VERSION}.tgz
+RUN wget https://botan.randombit.net/releases/Botan-2.${VERSION}.tgz && \
+  tar -xzf Botan-2.${VERSION}.tgz && \
+  rm Botan-2.${VERSION}.tgz
 WORKDIR Botan-2.${VERSION}
 RUN ./configure.py --prefix=/build/ &&\
-  make &&\
+  make -j"$(nproc)" &&\
   make install
 
 FROM entrypoint as botan-base2

diff --git a/src/main/resources/images/botan/Dockerfile-2_11-x b/src/main/resources/images/botan/Dockerfile-2_11-x
@@ -1,11 +1,12 @@
 FROM alpine-build:3.12 as botan-base1
 ARG VERSION
-RUN wget https://botan.randombit.net/releases/Botan-2.${VERSION}.tar.xz
-RUN tar -xf Botan-2.${VERSION}.tar.xz
+RUN apk add --no-cache python2 && \
+  wget https://botan.randombit.net/releases/Botan-2.${VERSION}.tar.xz && \
+  tar -xf Botan-2.${VERSION}.tar.xz && \
+  rm Botan-2.${VERSION}.tar.xz
 WORKDIR Botan-2.${VERSION}
-RUN apk add python2
 RUN ./configure.py --prefix=/build/ &&\
-  make &&\
+  make -j"$(nproc)" &&\
   make install
 
 FROM entrypoint as botan-base2

diff --git a/src/main/resources/images/botan/Dockerfile-3_9_0_x509_anvil b/src/main/resources/images/botan/Dockerfile-3_9_0_x509_anvil
@@ -1,14 +1,14 @@
 FROM alpine-build:3.17 AS botan-base1
 
-RUN wget https://botan.randombit.net/releases/Botan-3.9.0.tar.xz
-RUN apk add xz
-RUN tar -xf Botan-3.9.0.tar.xz
+RUN apk add --no-cache xz python3 && \
+  wget https://botan.randombit.net/releases/Botan-3.9.0.tar.xz && \
+  tar -xf Botan-3.9.0.tar.xz && \
+  rm Botan-3.9.0.tar.xz
 WORKDIR Botan-3.9.0
 COPY botan_3.9.0_clientauth.patch botan_3.9.0_clientauth.patch
-RUN git apply botan_3.9.0_clientauth.patch
-RUN apk add python3
-RUN ./configure.py --prefix=/build/ &&\
-  make &&\
+RUN git apply botan_3.9.0_clientauth.patch && \
+  ./configure.py --prefix=/build/ &&\
+  make -j"$(nproc)" &&\
   make install
 
 FROM entrypoint AS botan-base2

diff --git a/src/main/resources/images/botan/Dockerfile-3x b/src/main/resources/images/botan/Dockerfile-3x
@@ -1,13 +1,13 @@
 FROM alpine-build:3.17 as botan-base1
 ARG VERSION
 ARG BUILD_FLAGS=""
-RUN wget https://botan.randombit.net/releases/Botan-3.${VERSION}.tar.xz
-RUN apk add xz
-RUN tar -xf Botan-3.${VERSION}.tar.xz
+RUN apk add --no-cache xz python3 && \
+  wget https://botan.randombit.net/releases/Botan-3.${VERSION}.tar.xz && \
+  tar -xf Botan-3.${VERSION}.tar.xz && \
+  rm Botan-3.${VERSION}.tar.xz
 WORKDIR Botan-3.${VERSION}
-RUN apk add python3
 RUN ./configure.py --prefix=/build/ ${BUILD_FLAGS} &&\
-  make &&\
+  make -j"$(nproc)" &&\
   make install
 
 FROM entrypoint as botan-base2

diff --git a/src/main/resources/images/bouncycastle/Dockerfile-1_x b/src/main/resources/images/bouncycastle/Dockerfile-1_x
@@ -1,8 +1,10 @@
 FROM maven:slim as maven
 ARG VERSION
-RUN apt update && apt install -y git
+RUN apt-get update && \
+  apt-get install -y git && \
+  rm -rf /var/lib/apt/lists/*
 WORKDIR /src
-RUN git clone https://github.com/RUB-NDS/BouncyCastleTLS.git
+RUN git clone --depth=1 https://github.com/RUB-NDS/BouncyCastleTLS.git
 WORKDIR /src/BouncyCastleTLS
 RUN mvn clean install -Dbc.version=1.${VERSION}
 

diff --git a/src/main/resources/images/firefox/Dockerfile b/src/main/resources/images/firefox/Dockerfile
@@ -1,19 +1,19 @@
 FROM ubuntu:16.04 as firefox-ubuntu-base
-RUN apt-get update
-RUN apt-get install -y wget
-RUN apt-get install -y bzip2
-RUN apt-get install -y --no-install-recommends xfce4
-RUN apt-get install -y --no-install-recommends libcanberra-gtk*
+RUN apt-get update && \
+  apt-get install -y wget bzip2 && \
+  apt-get install -y --no-install-recommends xfce4 && \
+  apt-get install -y --no-install-recommends libcanberra-gtk* && \
+  rm -rf /var/lib/apt/lists/*
 
 FROM firefox-ubuntu-base as firefox-client
 ARG VERSION
-RUN wget https://ftp.mozilla.org/pub/firefox/releases/${VERSION}/linux-$(uname -m)/en-US/firefox-${VERSION}.tar.bz2
-RUN tar -xjf firefox-${VERSION}.tar.bz2
-RUN mv firefox /opt/
-COPY ./autoconfig.js /opt/firefox/defaults/pref/
-COPY ./ca.pem /opt/firefox/defaults/pref/
+# download, extract and delete the archive in one layer to keep it out of the image
+RUN wget https://ftp.mozilla.org/pub/firefox/releases/${VERSION}/linux-$(uname -m)/en-US/firefox-${VERSION}.tar.bz2 && \
+  tar -xjf firefox-${VERSION}.tar.bz2 -C /opt/ && \
+  rm firefox-${VERSION}.tar.bz2 && \
+  ln -sf /opt/firefox/firefox /bin/firefox
+COPY ./autoconfig.js ./ca.pem /opt/firefox/defaults/pref/
 COPY ./mozilla.cfg /opt/firefox/
-RUN ln -sf /opt/firefox/firefox /bin/firefox
 LABEL "tls_implementation"="firefox"
 LABEL "tls_implementation_version"="${VERSION}"
 LABEL "tls_implementation_connectionRole"="client"

diff --git a/src/main/resources/images/gnutls/Dockerfile-3_3_0-15 b/src/main/resources/images/gnutls/Dockerfile-3_3_0-15
@@ -8,24 +8,22 @@ FROM alpine-build:3.6 as gnutls-gnutls
 ARG VERSION
 ENV PKG_CONFIG_PATH=/build/lib/pkgconfig/
 RUN git clone --depth=1 --branch gnutls_3_3_${VERSION} https://github.com/gnutls/gnutls
-RUN apk add guile
-RUN apk add guile-dev
-RUN wget https://ftp.gnu.org/gnu/autogen/rel5.18.12/autogen-5.18.12.tar.gz
-RUN tar -xzf autogen-5.18.12.tar.gz
+RUN apk add --no-cache guile guile-dev && \
+  wget https://ftp.gnu.org/gnu/autogen/rel5.18.12/autogen-5.18.12.tar.gz && \
+  tar -xzf autogen-5.18.12.tar.gz && \
+  rm autogen-5.18.12.tar.gz
 WORKDIR /src/autogen-5.18.12/
-RUN ./configure
-RUN make
-RUN make install
+RUN ./configure && make && make install
 WORKDIR /src/gnutls/
 RUN git submodule update --init --no-fetch
 COPY --from=gnutls-libnettle /build/ /build/
-RUN make autoreconf
-RUN ./configure --with-included-libtasn1 --with-included-unistring --disable-maintainer-mode --disable-doc --disable-full-test-suite --disable-cxx --disable-padlock --without-p11-kit --without-tpm --prefix=/build/
-RUN make && make install
+RUN make autoreconf && \
+  ./configure --with-included-libtasn1 --with-included-unistring --disable-maintainer-mode --disable-doc --disable-full-test-suite --disable-cxx --disable-padlock --without-p11-kit --without-tpm --prefix=/build/ && \
+  make -j"$(nproc)" && make install
 # copy all libs we need
-RUN mkdir /libdeps
-RUN cp $(LD_LIBRARY_PATH="/build/lib/" ldd /build/bin/gnutls-serv | awk '$3=="" {print $1}; $3!="" {print $3}') /libdeps/
-RUN cp $(LD_LIBRARY_PATH="/build/lib/" ldd /build/bin/gnutls-cli | awk '$3=="" {print $1}; $3!="" {print $3}') /libdeps/
+RUN mkdir /libdeps && \
+  cp $(LD_LIBRARY_PATH="/build/lib/" ldd /build/bin/gnutls-serv | awk '$3=="" {print $1}; $3!="" {print $3}') /libdeps/ && \
+  cp $(LD_LIBRARY_PATH="/build/lib/" ldd /build/bin/gnutls-cli | awk '$3=="" {print $1}; $3!="" {print $3}') /libdeps/
 
 FROM entrypoint as gnutls-base
 COPY --from=gnutls-gnutls /build/ /artifacts/ssllib/

diff --git a/src/main/resources/images/gnutls/Dockerfile-3_3_x b/src/main/resources/images/gnutls/Dockerfile-3_3_x
@@ -8,24 +8,22 @@ FROM alpine-build:3.6 as gnutls-gnutls
 ARG VERSION
 ENV PKG_CONFIG_PATH=/build/lib/pkgconfig/
 RUN git clone --depth=1 --branch gnutls_3_3_${VERSION} https://github.com/gnutls/gnutls
-RUN apk add guile
-RUN apk add guile-dev
-RUN wget https://ftp.gnu.org/gnu/autogen/rel5.18.12/autogen-5.18.12.tar.gz
-RUN tar -xzf autogen-5.18.12.tar.gz
+RUN apk add --no-cache guile guile-dev && \
+  wget https://ftp.gnu.org/gnu/autogen/rel5.18.12/autogen-5.18.12.tar.gz && \
+  tar -xzf autogen-5.18.12.tar.gz && \
+  rm autogen-5.18.12.tar.gz
 WORKDIR /src/autogen-5.18.12/
-RUN ./configure
-RUN make
-RUN make install
+RUN ./configure && make && make install
 WORKDIR /src/gnutls/
 RUN git submodule update --init --no-fetch
 COPY --from=gnutls-libnettle /build/ /build/
-RUN make autoreconf
-RUN ./configure --with-included-libtasn1 --with-included-unistring --disable-maintainer-mode --disable-doc --disable-full-test-suite --disable-cxx --disable-padlock --without-p11-kit --without-tpm --prefix=/build/
-RUN make && make install
+RUN make autoreconf && \
+  ./configure --with-included-libtasn1 --with-included-unistring --disable-maintainer-mode --disable-doc --disable-full-test-suite --disable-cxx --disable-padlock --without-p11-kit --without-tpm --prefix=/build/ && \
+  make -j"$(nproc)" && make install
 # copy all libs we need
-RUN mkdir /libdeps
-RUN cp $(LD_LIBRARY_PATH="/build/lib/" ldd /build/bin/gnutls-serv | awk '$3=="" {print $1}; $3!="" {print $3}') /libdeps/
-RUN cp $(LD_LIBRARY_PATH="/build/lib/" ldd /build/bin/gnutls-cli | awk '$3=="" {print $1}; $3!="" {print $3}') /libdeps/
+RUN mkdir /libdeps && \
+  cp $(LD_LIBRARY_PATH="/build/lib/" ldd /build/bin/gnutls-serv | awk '$3=="" {print $1}; $3!="" {print $3}') /libdeps/ && \
+  cp $(LD_LIBRARY_PATH="/build/lib/" ldd /build/bin/gnutls-cli | awk '$3=="" {print $1}; $3!="" {print $3}') /libdeps/
 
 FROM entrypoint as gnutls-base
 COPY --from=gnutls-gnutls /build/ /artifacts/ssllib/