Allow docker cache; update apt just before install

[seanf]

Also reduced the number of docker layers by putting all apt-get commands in one RUN directive.

This can make ./kdc build quite a bit faster, but should still prevent broken builds due to outdated apt caches.