also, state dirs are moved to /var/cache/ and /var/lock/, thus avoiding their unneeded "copy" to host. ICONS_DIR is still pointing to documentroot, so this is not yet complete.
same base image as rss-bridge, so that the whole environment is more coherent