Final start command is run as `root`

[nebulatgs]

Is there an existing issue for this?

• [X] I have searched the existing issues

Describe the bug

The final start command is run as root in the deployed container. This is bad practice, and can open up vulnerabilities for the app run as root.

This also causes certain programs like puppeteer to refuse to launch (ERROR:zygote_host_impl_linux.cc(90)] Running as root without --no-sandbox is not supported.)

To reproduce

Build a project with Nixpacks. Run the resulting OCI image. The start command will be run as root.

Expected behavior

The start command should be deescalated and run as another PID.

Environment

Windows 11, Nixpacks v0.3.8

(affects all versions)

[pinkforest]

I wondered about this alongside alpine for some things. I could address this. Just need to dislodge my other PR first of the pipe.