- Use CMD instead of ENTRYPOINT to launch sshd (easier to overwrite when using locally). - Expose port 22.