Consider splitting provision.sh

[rarkins]

One quirk of having provision.sh is that we end up with most of the image size in a single layer. Docker can pull multiple image layers at once for increased speed, so essentially it's slower to pull and image like this with one big image than it is to pull one with many, smaller layers.