Geoserver 3.0.0 docker, run as non root

GeoServer GeoServer User
1

I am configuring Geoserver 3.0.0 for production.
I am using what i understand is the official image? docker.osgeo.org/geoserver:3.0.0
For for security reasons i do not want to run the the application as the default root user. What approach should i use?
I see in the Dockerfile that you can set some options about users. But these only seem to affect the files /opt/geoserver_data files and not who is running the the application. Have i missed something? Do i need to build the image myself, but it seem to be counter productive if there is an official image?

ENV RUN_UNPRIVILEGED=
ENV RUN_WITH_USER_UID=
ENV RUN_WITH_USER_GID=

I have also tried setting the user in runtime. But Geoserver fail to start with permision issues

‘/usr/local/tomcat/conf’: Operation not permitted
Starting GeoServer as user: ubuntu (1000:1000)

2

I expect that this may be a feature request. The initial geoserver docker image installed tomcat by hand with a tomcat user. Presently it is based on the official tomcat:11.0-jdk21-temurin-noble base image; perhaps you can check there for options run not as root?

3

It is working as intended.
Setting USER__UID/GID is applied to Geoserver. I was just running / interpret docker commands wrong.
GS start with root (defined by the image). But changes to the user set by the env.