* Make the build deterministic by pinning it to a particular revision * Add curl as a run-time dependency * Use the improved Docker practices for the Nimbus build as well