* [build] Fix reproducible build issues
#### Why I did it 1. Add version control for debian* docker image to white list. 2. Always record docker image sha256 value, regardless of white list.
when build docker image, we need a base image. now base image is specified by tag. we can use sha256 to specify docker image.