Some of the issues were really difficult to tackle, like the linux kernel generating random hashes.

The last mile was done by removing the use of ruby (which uses some random tmp directories) from the final image. Asciidoctor (ruby) was replaced with asciidoc (python).