• CMDs cannot take build args
  • Use ‘sharing=locking’ for Go caches