Add build user for circleci instead of running as root.

.circleci/config.yml

@@ -5,6 +5,7 @@ jobs:
   build:
     docker:
       - image: docker.io/sudoproject/debian:latest
+        user: build
     steps:
       - checkout
       - run:
@@ -18,6 +19,7 @@ jobs:
   test:
     docker:
       - image: docker.io/sudoproject/debian:latest
+        user: build
     steps:
       # Reuse the workspace from the build job
       - attach_workspace:

docker/debian/latest/Dockerfile

@@ -6,3 +6,4 @@ RUN DEBIAN_FRONTEND=noninteractive TZ=America/Denver apt-get update && \
 	libsasl2-dev libselinux1-dev libsepol1-dev libssl-dev zlib1g-dev \
 	libaudit-dev libssl-dev python3-dev libpython3-dev \
 	file lsb-release fakeroot procps git ssh openssh-client
+RUN useradd -ms /bin/bash build

docker/debian/testing/Dockerfile

@@ -6,3 +6,4 @@ RUN DEBIAN_FRONTEND=noninteractive TZ=America/Denver apt-get update && \
 	libsasl2-dev libselinux1-dev libsepol1-dev libssl-dev zlib1g-dev \
 	libaudit-dev libssl-dev python3-dev libpython3-dev \
 	file lsb-release fakeroot procps git ssh openssh-client
+RUN useradd -ms /bin/bash build

docker/fedora/latest/Dockerfile

@@ -5,3 +5,4 @@ RUN dnf -y install audit-libs-devel cyrus-sasl-devel glibc-devel \
     libselinux-devel libsepol-devel openldap-devel openssl-devel pam-devel \
     python3-devel rpm-build zlib-devel binutils ed gcc gdb git openssh \
     procps which
+RUN useradd -ms /bin/bash build

docker/fedora/rawhide/Dockerfile

@@ -5,3 +5,4 @@ RUN dnf -y install audit-libs-devel cyrus-sasl-devel glibc-devel \
     libselinux-devel libsepol-devel openldap-devel openssl-devel pam-devel \
     python3-devel rpm-build zlib-devel binutils ed gcc gdb git openssh \
     procps which
+RUN useradd -ms /bin/bash build

docker/ubuntu/devel/Dockerfile

@@ -6,3 +6,4 @@ RUN DEBIAN_FRONTEND=noninteractive TZ=America/Denver apt-get update && \
 	libsasl2-dev libselinux1-dev libsepol1-dev libssl-dev zlib1g-dev \
 	libaudit-dev libssl-dev python3-dev libpython3-dev \
 	file lsb-release fakeroot procps git ssh openssh-client
+RUN useradd -ms /bin/bash build

docker/ubuntu/latest/Dockerfile

@@ -6,3 +6,4 @@ RUN DEBIAN_FRONTEND=noninteractive TZ=America/Denver apt-get update && \
 	libsasl2-dev libselinux1-dev libsepol1-dev libssl-dev zlib1g-dev \
 	libaudit-dev libssl-dev python3-dev libpython3-dev \
 	file lsb-release fakeroot procps git ssh openssh-client
+RUN useradd -ms /bin/bash build

docker/ubuntu/rolling/Dockerfile

@@ -6,3 +6,4 @@ RUN DEBIAN_FRONTEND=noninteractive TZ=America/Denver apt-get update && \
 	libsasl2-dev libselinux1-dev libsepol1-dev libssl-dev zlib1g-dev \
 	libaudit-dev libssl-dev python3-dev libpython3-dev \
 	file lsb-release fakeroot procps git ssh openssh-client
+RUN useradd -ms /bin/bash build