The build process is run entirely by Docker containers, for more
reliable reproducibility.

make targets for local builds can still be run for developement,
and the check/test targets are only used locally.