drop a docker image tar · layer structure · filesystem changes · sensitive files · build history · runs locally