Consolidate system update and package installation in Dockerfile

Signed-off-by: Matthieu MOREL <[email protected]>

Author: mmorel-35

bazel/external/Dockerfile.bazel

@@ -36,40 +36,46 @@
 # Update base image
 ARG UBUNTU_VERSION=22.04
 FROM ubuntu:${UBUNTU_VERSION} as build
-RUN apt update && apt upgrade -y
-RUN apt autoremove -y
 
-# Install Bazel deps
-RUN apt install -y software-properties-common
-RUN add-apt-repository ppa:openjdk-r/ppa
-RUN apt install -y \
+# Consolidated system update/upgrade and autoremove
+RUN apt-get update && \
+    apt-get upgrade -y && \
+    apt-get autoremove -y && \
+    rm -rf /var/lib/apt/lists/*
+
+
+# Install all build dependencies (Bazel + ProxyWasm)
+ARG DEPS="\
     build-essential \
+    clang \
+    curl \
+    git \
+    libssl-dev \
+    libstdc++6 \
     openjdk-21-jdk \
     python3 \
-    curl \
+    python3-distutils \
+    software-properties-common \
+    unzip \
     zip \
-    unzip
+    libz-dev\
+"
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends $DEPS && \
+    add-apt-repository ppa:openjdk-r/ppa && \
+    rm -rf /var/lib/apt/lists/*
+
+# Set working directory for Bazel build
+WORKDIR /root/bazel
 
 # Download Bazel source
 ARG BAZEL_VERSION=7.7.1
-RUN cd ~ && mkdir bazel && cd bazel
-RUN curl -LO https://github.com/bazelbuild/bazel/releases/download/${BAZEL_VERSION}/bazel-${BAZEL_VERSION}-dist.zip
-RUN unzip -q bazel-${BAZEL_VERSION}-dist.zip
+RUN curl -LO https://github.com/bazelbuild/bazel/releases/download/${BAZEL_VERSION}/bazel-${BAZEL_VERSION}-dist.zip && \
+    unzip -q bazel-${BAZEL_VERSION}-dist.zip
 
-# Build Bazel
-# NOTE: This step is flaky and frequently hangs for multiarch / buildx.
-# If it takes more than 2 hours, restart the Docker build and try again.
+## Build Bazel, copy the binary, then install ProxyWasm build deps
+# NOTE: This step is flaky and may hang for multiarch/buildx.
+# If it takes more than 2 hours, restart the Docker build.
 ENV EXTRA_BAZEL_ARGS="--tool_java_runtime_version=local_jdk"
-RUN bash ./compile.sh
-
-# Copy output to /usr/bin
-RUN cp /output/bazel /usr/bin/bazel
-
-# Install ProxyWasm build deps
-RUN apt install -y \
-    git \
-    python3-distutils \
-    clang \
-    libstdc++6 \
-    libssl-dev \
-    libz-dev
+RUN bash ./compile.sh && \
+    cp /output/bazel /usr/bin/bazel