the script is created and called on container startup, to separate the base image itself from the jupyterhub service configuration as much as possible