acme.sh image requires root access when using Docker

[sebschlicht]

While the acme.sh README explicitly states that no root/sudo access is required, the Docker image apparently can only be run as root in Docker.

The image does not respect PUID/PGID environment variables.
More importantly, the acme.sh binaries become inaccessible when using other means to go rootless (e.g. Docker's user directive).

This comes with some additional security threats (e.g. container escapes would grant root access to the host) and all acquired certificates are owned by root.

Steps to reproduce

1. docker run -u "1000:1000" --rm neilpang/acme.sh

Debug log

Not applicable, acme.sh can not be called. CLI output:

/usr/local/bin/--help: line 2: /root/.acme.sh/acme.sh: Permission denied

[github-actions]

Please upgrade to the latest code and try again first. Maybe it's already fixed. acme.sh --upgrade If it's still not working, please provide the log with --debug 2, otherwise, nobody can help you.