I've used docker containers for years, and I've never run

apt-get install

on a container that's already executing something. The container is the final product