Upstream docker images must be explicitly repulled to update
The usptream debian images are pulled the first time you build a given ARCH. They will not be updated unless you do so by hand.
This can result in inconsistent builds between platforms.
Need to figure out how to either lock them to a given version, like we do with the kernel/uboot/etc, or automatically update them if they are out of date...