Hum the Dockerfile is something more connected to the CI and the osquery repo than the toolchain. The CMake version in there might have to be updated, we might need to update the OS and also the list of packages (python stuff) for tests.
I don’t think that the change rate of that file is in sync with the toolchain. The toolchain repo was really meant for the compiler only, and all the files there are meant to produce a release tar.gz.