The images live at registry.uncontrol.me/ver4a/oci-builder

Two tags are currently used:
  - `:stable` latest image to have successfully passed CI tests
  - `:ci-dev` an image produced by CI, if it passes tests, it's promoted to `:stable`