[fix] use non-root user, set group ownership and file permission

Author: lilyLuLiu

oci/Containerfile

@@ -52,7 +52,6 @@ ENV PULUMI_HOME "/opt/mapt/run"
 WORKDIR ${PULUMI_HOME}
 
 RUN mkdir -p /opt/mapt/run \
-    && chmod -R 0777 /opt/mapt/run \
     && if [ "$TARGETARCH" = "arm64" ]; then export ARCH_N=aarch64; fi \
     && export AWS_CLI_URL="https://awscli.amazonaws.com/awscli-exe-linux-${ARCH_N}-${AWS_CLI_VERSION}.zip" \
     && export AZ_CLI_RPM="https://packages.microsoft.com/rhel/9.0/prod/Packages/a/azure-cli-${AZ_CLI_VERSION}-1.el9.${ARCH_N}.rpm" \
@@ -72,8 +71,11 @@ RUN mkdir -p /opt/mapt/run \
     && pulumi plugin install resource tls ${PULUMI_TLS_VERSION} \
     && pulumi plugin install resource random ${PULUMI_RANDOM_VERSION} \
     && pulumi plugin install resource awsx ${PULUMI_AWSX_VERSION} \
-    && pulumi plugin install resource aws-native ${PULUMI_AWS_NATIVE_VERSION} 
-    
+    && pulumi plugin install resource aws-native ${PULUMI_AWS_NATIVE_VERSION} \
+    && chown -R 1001:0 /opt/mapt/run \
+    && chmod -R g=u /opt/mapt/run
+
+USER 1001
 ENTRYPOINT ["mapt"]
 CMD ["-h"]