Set default to rootless but provide seperate root image

.woodpecker.yaml

@@ -18,6 +18,28 @@ steps:
   when:
     - branch: main
       event: [push, manual]
+
+- name: docker-root
+  image: woodpeckerci/plugin-docker-buildx
+  privileged: true
+  settings:
+    dockerfile: Dockerfile-root
+    registry: git.ar21.de
+    username:
+      from_secret: REGISTRY_USER
+    password:
+      from_secret: REGISTRY_PASS
+    repo: git.ar21.de/aaron/ansible-lint
+    tags:
+      - root
+      - root-${CI_PIPELINE_NUMBER}
+    platforms:
+      - linux/arm64
+      - linux/amd64
+  when:
+    - branch: main
+      event: [push, manual]
+
 - name: docker-build
   image: woodpeckerci/plugin-docker-buildx
   privileged: true

Dockerfile

@@ -1,17 +1,17 @@
 FROM python:3.13.2-slim-bookworm
 RUN apt-get update -qq && apt-get install -qq git --no-install-recommends && rm -rf /var/lib/apt/lists/*
 WORKDIR ./
-# ARG PUID=1000
-# ENV GROUP dockergroup
-# ENV USER docker
-# ENV HOMEDIR "/home/${USER}"
-# ENV PATH ${HOMEDIR}/.local/bin:$PATH
+ARG PUID=1000
+ENV GROUP dockergroup
+ENV USER docker
+ENV HOMEDIR "/home/${USER}"
+ENV PATH ${HOMEDIR}/.local/bin:$PATH
 ENV PLUGIN_PROFILE production
-# RUN useradd -u "${PUID}" -m "${USER}"
+RUN useradd -u "${PUID}" -m "${USER}"
 COPY script.sh /bin/
 RUN chmod +x /bin/script.sh
-# USER ${USER}
-# WORKDIR ${HOMEDIR}
+USER ${USER}
+WORKDIR ${HOMEDIR}
 COPY requirements.txt .
 RUN pip install --no-cache-dir -r requirements.txt
 RUN rm requirements.txt

Dockerfile-root

@@ -0,0 +1,19 @@
+FROM python:3.13.2-slim-bookworm
+RUN apt-get update -qq && apt-get install -qq git --no-install-recommends && rm -rf /var/lib/apt/lists/*
+WORKDIR ./
+# ARG PUID=1000
+# ENV GROUP dockergroup
+# ENV USER docker
+# ENV HOMEDIR "/home/${USER}"
+# ENV PATH ${HOMEDIR}/.local/bin:$PATH
+ENV PLUGIN_PROFILE production
+# RUN useradd -u "${PUID}" -m "${USER}"
+COPY script.sh /bin/
+RUN chmod +x /bin/script.sh
+# USER ${USER}
+# WORKDIR ${HOMEDIR}
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+RUN rm requirements.txt
+
+ENTRYPOINT [ "script.sh" ]