Upgrade non-base images just before the end of their building

Santiago R.R.requested to merge
santiago/pipeline:apt-upgrade-at-end-of-image-building into master

Fetching cached container images from the registry may result in out-dated images, so we need to make sure to run apt-get upgrade before the end of the building process.

Merge request reports