Update container image to run as non root

[BobyMCbobs]

Goal

This PR removes extra dependencies in the container image to run as a non-root user, instead defaulting all processes to run as root from the entrypoint.
This is important, as an exec's into the container image will not run as root, unlike currently.

Changes

Please describe the changes made in the pull request here.

Below you'll find a checklist. For each item on the list, check one option and delete the other.

Tests

• Automated tests have been added
• This PR does not require tests

Changelog

• Entry has been added to changelog
• This PR does not make a user-facing change

Documentation

• Docs have been updated
• This change does not need a documentation update

[ukutaht]

Thanks for the PR!

defaulting all processes to run as root from the entrypoint.

Sorry, as I understand this change is defaulting all processes to run as plausibleuser who is not root, correct?

[BobyMCbobs]

Thanks for the PR!

defaulting all processes to run as root from the entrypoint.

Sorry, as I understand this change is defaulting all processes to run as plausibleuser who is not root, correct?

Currently

When the container is started, the root user hands off running Plausible code as the plausibleuser user.
This means that any commands run with docker exec will run as root in the container instead of plausibleuser.

In some environments, running any container as root is not allowed due to security implications.

To clarify

In this PR: from the entrypoint of the container, any process will be run as the user specified (plausibleuser) and nothing will run as root

---

References:

• https://docs.docker.com/engine/reference/builder/#user

[ukutaht]

Thanks @BobyMCbobs ! 🙏