- use exec in entrypoint.sh, get rid of extra shell process - use CMD instead of ENTRYPOINT, so image can be run with /bin/sh arg