We use this very same base image that is published to DockerHub and pinned in our launcher.
Meta is deployed using the same stuff everyone uses, a ./launcher bootstrap app creates the image and everything. Using the same tools ensure we can hit most problems earlier and fix those before they are pushed to everyone.