The production signer is using a really old base OS (Debian 4.0 Etch or 5.0 Lenny) with some packages like openssl from Debian 6.0 Stretch. This commit uses the oldest available Docker base image to make a somewhat reproducible variant of this OS.
This is work in progress to add the signer components
