move away from excessive SSH and get build working on local machines

[mvanveen]

roughly this milestone is for "we are using docker primitives/commands with no SSH indirection" and "works on my and @blueskymonster's machine" for local testing.