Container image is privileged

[almereyda]

When displaying the /boot page of my instance, it says:

System user is sane

It is good practice not to run Grist as the root user.

User appears to be root (UID 0)

❌

It is good practice to provide unprivileged Container images, by using the USER directive. This has implications on the way in which the image is built.

Reference:

• USER - Best practices for Dockerfile instructions | Docker Docs

[paulfitz]

Thanks @almereyda. You can find some context for this in https://github.com/gristlabs/grist-core/pull/789