Test build for #3020

Author: SUSE Update Bot

git-image/Dockerfile

@@ -27,7 +27,11 @@ COPY --from=target / /target
 
 RUN set -euo pipefail; \
     export PERMCTL_ALLOW_INSECURE_MODE_IF_NO_PROC=1; \
-    zypper -n --installroot /target --gpg-auto-import-keys install --no-recommends git-core openssh-clients
+    zypper -n --installroot /target --gpg-auto-import-keys install --no-recommends git-core openssh-clients shadow
+# create the user and group with the given ids
+RUN set -euo pipefail; \
+    groupadd -R /target -g 1000 -r git; \
+    useradd -R /target -u 1000 -g 1000 -m -r -s /bin/bash git
 # sanity check that the version from the tag is equal to the version of git-core that we expect
 RUN set -euo pipefail; \
     [ "$(rpm --root /target -q --qf '%{version}' git-core | \

helm-image/Dockerfile

@@ -27,7 +27,11 @@ COPY --from=target / /target
 
 RUN set -euo pipefail; \
     export PERMCTL_ALLOW_INSECURE_MODE_IF_NO_PROC=1; \
-    zypper -n --installroot /target --gpg-auto-import-keys install --no-recommends ca-certificates-mozilla helm
+    zypper -n --installroot /target --gpg-auto-import-keys install --no-recommends ca-certificates-mozilla helm shadow
+# create the user and group with the given ids
+RUN set -euo pipefail; \
+    groupadd -R /target -g 1000 -r helm; \
+    useradd -R /target -u 1000 -g 1000 -m -r -s /bin/bash helm
 # sanity check that the version from the tag is equal to the version of helm that we expect
 RUN set -euo pipefail; \
     [ "$(rpm --root /target -q --qf '%{version}' helm | \

kubectl-1.31-image/Dockerfile

@@ -25,7 +25,11 @@ COPY --from=target / /target
 
 RUN set -euo pipefail; \
     export PERMCTL_ALLOW_INSECURE_MODE_IF_NO_PROC=1; \
-    zypper -n --installroot /target --gpg-auto-import-keys install --no-recommends kubernetes1.31-client
+    zypper -n --installroot /target --gpg-auto-import-keys install --no-recommends kubernetes1.31-client shadow
+# create the user and group with the given ids
+RUN set -euo pipefail; \
+    groupadd -R /target -g 1000 -r kubectl; \
+    useradd -R /target -u 1000 -g 1000 -m -r -s /bin/bash kubectl
 RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
     rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}; \
     rm -rf {/target,}/run/*; \

kubectl-1.32-image/Dockerfile

@@ -25,7 +25,11 @@ COPY --from=target / /target
 
 RUN set -euo pipefail; \
     export PERMCTL_ALLOW_INSECURE_MODE_IF_NO_PROC=1; \
-    zypper -n --installroot /target --gpg-auto-import-keys install --no-recommends kubernetes1.32-client
+    zypper -n --installroot /target --gpg-auto-import-keys install --no-recommends kubernetes1.32-client shadow
+# create the user and group with the given ids
+RUN set -euo pipefail; \
+    groupadd -R /target -g 1000 -r kubectl; \
+    useradd -R /target -u 1000 -g 1000 -m -r -s /bin/bash kubectl
 RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
     rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}; \
     rm -rf {/target,}/run/*; \

kubectl-1.33-image/Dockerfile

@@ -25,7 +25,11 @@ COPY --from=target / /target
 
 RUN set -euo pipefail; \
     export PERMCTL_ALLOW_INSECURE_MODE_IF_NO_PROC=1; \
-    zypper -n --installroot /target --gpg-auto-import-keys install --no-recommends kubernetes1.33-client
+    zypper -n --installroot /target --gpg-auto-import-keys install --no-recommends kubernetes1.33-client shadow
+# create the user and group with the given ids
+RUN set -euo pipefail; \
+    groupadd -R /target -g 1000 -r kubectl; \
+    useradd -R /target -u 1000 -g 1000 -m -r -s /bin/bash kubectl
 RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
     rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}; \
     rm -rf {/target,}/run/*; \

kubectl-1.34-image/Dockerfile

@@ -26,7 +26,11 @@ COPY --from=target / /target
 
 RUN set -euo pipefail; \
     export PERMCTL_ALLOW_INSECURE_MODE_IF_NO_PROC=1; \
-    zypper -n --installroot /target --gpg-auto-import-keys install --no-recommends kubernetes1.34-client
+    zypper -n --installroot /target --gpg-auto-import-keys install --no-recommends kubernetes1.34-client shadow
+# create the user and group with the given ids
+RUN set -euo pipefail; \
+    groupadd -R /target -g 1000 -r kubectl; \
+    useradd -R /target -u 1000 -g 1000 -m -r -s /bin/bash kubectl
 RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
     rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}; \
     rm -rf {/target,}/run/*; \

samba-client-image/Dockerfile

@@ -26,7 +26,11 @@ COPY --from=target / /target
 
 RUN set -euo pipefail; \
     export PERMCTL_ALLOW_INSECURE_MODE_IF_NO_PROC=1; \
-    zypper -n --installroot /target --gpg-auto-import-keys install --no-recommends samba-client
+    zypper -n --installroot /target --gpg-auto-import-keys install --no-recommends samba-client shadow
+# create the user and group with the given ids
+RUN set -euo pipefail; \
+    groupadd -R /target -g 1000 -r smbc; \
+    useradd -R /target -u 1000 -g 1000 -m -r -s /bin/bash smbc
 # sanity check that the version from the tag is equal to the version of samba-client that we expect
 RUN set -euo pipefail; \
     [ "$(rpm --root /target -q --qf '%{version}' samba-client | \

samba-toolbox-image/Dockerfile

@@ -26,7 +26,11 @@ COPY --from=target / /target
 
 RUN set -euo pipefail; \
     export PERMCTL_ALLOW_INSECURE_MODE_IF_NO_PROC=1; \
-    zypper -n --installroot /target --gpg-auto-import-keys install --no-recommends samba-client tdb-tools samba-test
+    zypper -n --installroot /target --gpg-auto-import-keys install --no-recommends samba-client tdb-tools shadow samba-test
+# create the user and group with the given ids
+RUN set -euo pipefail; \
+    groupadd -R /target -g 1000 -r smbc; \
+    useradd -R /target -u 1000 -g 1000 -m -r -s /bin/bash smbc
 # sanity check that the version from the tag is equal to the version of samba-client that we expect
 RUN set -euo pipefail; \
     [ "$(rpm --root /target -q --qf '%{version}' samba-client | \