diff --git a/docker/build/builder.Dockerfile b/docker/build/builder.Dockerfile
index 8aa92c21..086d6210 100644
--- a/docker/build/builder.Dockerfile
+++ b/docker/build/builder.Dockerfile
@@ -1,8 +1,7 @@
-# Alpine with China mirror
+# Development image for building shadowsocks-c. The default bundled mode
+# builds every dependency from third_party/dist, so only a toolchain is
+# needed (Alpine's Mbed TLS 4 is not supported by system mode).
 FROM alpine
-MAINTAINER wener <wenermail@gmail.com>
 
-# Better for cache and dev
 RUN apk add --no-cache --virtual .build-deps \
-    alpine-sdk cmake \
-    linux-headers libev-dev libsodium-dev mbedtls-static mbedtls-dev pcre2-dev udns-dev
+    build-base cmake ninja python3 linux-headers
diff --git a/docker/build/dockerbuild.sh b/docker/build/dockerbuild.sh
index 2b61cc60..e01448cd 100755
--- a/docker/build/dockerbuild.sh
+++ b/docker/build/dockerbuild.sh
@@ -2,4 +2,7 @@
 set -e
 set -o xtrace
 
-cmake -DBUILD_STATIC=OFF . && make && make install
\ No newline at end of file
+cmake -S . -B build -G Ninja
+cmake --build build
+ctest --test-dir build -L 'unit|vendor' --output-on-failure
+cmake --install build