Harden Docker apt install with retry logic

Dockerfile

@@ -4,26 +4,28 @@ ENV PYTHONDONTWRITEBYTECODE=1 \
     PYTHONUNBUFFERED=1 \
     PIP_NO_CACHE_DIR=1
 
-RUN apt-get update && apt-get install -y --no-install-recommends \
+RUN set -eux; \
-    build-essential \
+    apt-get update -o Acquire::Retries=5; \
-    libpq-dev \
+    apt-get install -y --no-install-recommends -o Acquire::Retries=5 \
-    curl \
+        build-essential \
-    nodejs \
+        libpq-dev \
-    npm \
+        curl \
-    libasound2 \
+        nodejs \
-    libatk-bridge2.0-0 \
+        npm \
-    libatk1.0-0 \
+        libasound2 \
-    libcups2 \
+        libatk-bridge2.0-0 \
-    libgbm1 \
+        libatk1.0-0 \
-    libgtk-3-0 \
+        libcups2 \
-    libnss3 \
+        libgbm1 \
-    libx11-xcb1 \
+        libgtk-3-0 \
-    libxcomposite1 \
+        libnss3 \
-    libxdamage1 \
+        libx11-xcb1 \
-    libxfixes3 \
+        libxcomposite1 \
-    libxrandr2 \
+        libxdamage1 \
-    fonts-liberation \
+        libxfixes3 \
-    && rm -rf /var/lib/apt/lists/*
+        libxrandr2 \
+        fonts-liberation; \
+    rm -rf /var/lib/apt/lists/*
 
 WORKDIR /app