dockerfile entrypoint vs cmd