This depends on a new entrypoint put inside the docker image, that will read BUILDER_UID and fix up the users and files. This also removes "sudo" and allows the entire script to be run with sudo without messing with the build file permissions.