dockerfile command vs entrypoint