/home incorrectly has ownership changed to nonroot:nonroot (65532:65532)

[polarathene]

Describe the bug

Images (at least Debian 12 variants) seem to add /home/nonroot layer that modifies the ownership of /home:

Presumably that was unintentional and only meant to be applied to /home/nonroot?

To Reproduce

You can inspect the responsible layer where this change has been highlighted above via the dive tool:

docker run --rm -it \
  -v /var/run/docker.sock:/var/run/docker.sock \
  wagoodman/dive:latest \
  gcr.io/distroless/static-debian12:latest

While I've not done a diff of the file content, it does look rather similar to gcr.io/distroless/static-debian12:nonroot. That might explain why the /home/nonroot user is created?

docker inspect gcr.io/distroless/static-debian12:nonroot does show metadata differs, such as the default working directory and user to run as.

Expected behavior

/home should keep it's 0:0 ownership?

[loosebazooka]

interesting, lemme go see

[loosebazooka]

@thesayyn could this be happening in rules_distroless?