ioc: ensure single UID is used in containers.

IOC images do not require multiple users. Ensure all applications and
filesystem files satisfy this restriction, so that no issues occur at
runtime.

CHANGES.md

@@ -2,6 +2,13 @@
 
 ## Unreleased
 
+### Bug fixes
+
+* ioc: ensure single UID is used in containers. by @henriquesimoes in
+  https://github.com/cnpem/epics-in-docker/69
+  * This allows to use ignore_chown_errors=True without subuid and subgid, but
+    still have everything working, especially apt.
+
 ## v0.9.0
 
 Users willing to use `iocStats`, `ipmiComm`, `pyDevSup`, `SNMP`, `motorPIGCS2`,

Dockerfile

@@ -10,6 +10,9 @@ ARG RUNTIME_PACKAGES
 ARG RUNTIME_TAR_PACKAGES
 ARG RUNTIME_PIP_PACKAGES
 
+COPY --from=build-image /usr/local/bin/lnls-single-uid /usr/local/bin/lnls-single-uid
+RUN lnls-single-uid
+
 RUN apt update -y && \
     apt install -y --no-install-recommends \
         libreadline8 \