iproute2 needs to be explicitly installed, the iptables alternative needs to
iptables-legacy.

We need 2.5 for block-ipv6

use the stretch image, at least until #2 is fixed.

We add the http module so we can get prometheus metrics as well.

We aren't currently running a udp server

We can add type: forking to chaperone, but then we have to deal with pid files etc.

/bin/sh exec

build is fixed

use go 1.13 so it can utilize go modules

Upstream doesn't have proper releases, and they are breaking master causing
breakage in our pipelines