Post History

You don't actually need the UID in that particular example.

A more elegant solution would be to use the `--chown` option of the [COPY](https://github.com/containers/common/blob/main/docs/Containerfile.5.md#format) directive.

```containerfile
FROM bash:latest as builder

RUN adduser adduser \
  --disabled-password \
  --gecos "" \
  --home "/nonexistent" \
  --shell "/sbin/nologin" \
  --no-create-home \
  "nonroot"
USER nonroot

WORKDIR /app

# Simulating a build here
RUN echo binary > executable


# A distroless base image for static executables.
# It uses the nonroot user:
# https://edu.chainguard.dev/chainguard/chainguard-images/reference/glibc-dynamic/image_specs/
FROM cgr.dev/chainguard/cc-dynamic:latest

WORKDIR /app

# This eliminates the need for UIDs.
COPY --from builder --chown=nonroot /app/executable ./

CMD "/app/executable"
```