That work is hard and the tooling is bad and it only takes one mistake, like forgetting to suppress the mtime of your files.

Docker was good enough, simple enough, and got the job done. It won for good reason, but the next generation should learn from it's mistakes.