Title. In other words, make a .dot directory, make it as $ROOTFS, in a distroless image, chown it to a specific user and group and then pack everything in it.