Fix ~/.ivy2 dir ownership

Author: dolfinus

docker/Dockerfile.worker

@@ -72,18 +72,15 @@ RUN --mount=type=bind,source=./syncmaster/worker/ivy2.py,target=/app/syncmaster/
         # ivy2 keeps file mtime as it was uploaded to Maven
         --times \
         --omit-dir-times \
+        --perms \
         # ivydata-$version.properties contains download time, avoid copying it to prevent layer cache invalidation
         --exclude 'ivydata*.properties' \
         # ignored by Spark
         --exclude 'ivyreport*' \
         # do not copy ~/.ivy2/jars/$group.$artifact.jar, as these are the same files as in ~/.ivy2/cache/$group/$artifact/jars/
         /root/.ivy2/cache/ /home/syncmaster/.ivy2/cache/ && \
     # # custom Spark session function may download additional jars, so user have to own them, but not jars
-    find /home/syncmaster/.ivy2/ -type d -exec chmod 777 {} \; && \
-    # reset directory timestamps
-    find /home/syncmaster/.ivy2/ -type d -exec touch -d @0 {} \;
-
-RUN mkdir -p /root && ln -s /home/syncmaster/.ivy2 /root/.ivy2
+    find /home/syncmaster/.ivy2 -type d -exec chown syncmaster:syncmaster {} \;
 
 
 FROM base AS prod
@@ -92,7 +89,7 @@ FROM base AS prod
 COPY --link --from=builder /app/.venv/ /app/.venv/
 
 # using --link to make ~/.ivy2 a separated layer in docker image, not based on previous layers
-COPY --link --from=ivy2_packages /home/syncmaster/.ivy2/cache/ /home/syncmaster/.ivy2/cache/
+COPY --link --from=ivy2_packages /home/syncmaster/.ivy2/ /home/syncmaster/.ivy2/
 # If someone needs to use worker image with root user, use the same jars
 RUN mkdir -p /root && ln -s /home/syncmaster/.ivy2 /root/.ivy2
 
@@ -107,6 +104,7 @@ USER syncmaster
 
 FROM ivy2_packages AS test
 
+RUN mkdir -p /root && ln -s /home/syncmaster/.ivy2 /root/.ivy2
 RUN --mount=type=cache,target=/root/.cache/uv \
     uv sync \
         --frozen \