feat(dotnet 8.0): add shadow file to chiseled rootfs (#779)

* feat: add shadow file to chiseled rootfs

* chore(deps): update ubuntu.azurecr.io/ubuntu:24.04 docker digest to 5dcf95d (#787)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update hadolint/hadolint-action action to v3.3.0 (#783)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix: lock root accoun via passwd file

---------

Signed-off-by: zhijie-yang <zhijie.yang@canonical.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: zhijie-yang <zhijie.yang@canonical.com>

Author: 3 people

dotnet-aspnet/Dockerfile.24.04

@@ -24,7 +24,7 @@ RUN mkdir /rootfs \
         aspnetcore-runtime-8.0_libs
 RUN install -d -m 0755 -o "$UID" -g "$GID" "/rootfs/home/$USER" \
     && echo -e "root:x:0:\n$GROUP:x:$GID:" >/rootfs/etc/group \
-    && echo -e "root:x:0:0:root:/root:/noshell\n$USER:x:$UID:$GID::/home/$USER:/noshell" >/rootfs/etc/passwd
+    && echo -e "root:!:0:0:root:/root:/noshell\n$USER:x:$UID:$GID::/home/$USER:/noshell" > /rootfs/etc/passwd
 
 FROM scratch AS sbom-prep
 COPY --from=builder /rootfs /

dotnet-deps/Dockerfile.24.04

@@ -18,7 +18,7 @@ RUN chmod +x /usr/bin/chisel-wrapper
 RUN mkdir -p /rootfs/etc \
     && install -d -m 0755 -o "$UID" -g "$GID" "/rootfs/home/$USER" \
     && echo -e "root:x:0:\n$GROUP:x:$GID:" >/rootfs/etc/group \
-    && echo -e "root:x:0:0:root:/root:/noshell\n$USER:x:$UID:$GID::/home/$USER:/noshell" >/rootfs/etc/passwd
+    && echo -e "root:!:0:0:root:/root:/noshell\n$USER:x:$UID:$GID::/home/$USER:/noshell" > /rootfs/etc/passwd
 
 RUN chisel-wrapper --generate-dpkg-status /status -- --release "ubuntu-$UBUNTU_RELEASE" --root /rootfs \
     base-files_base \

dotnet-runtime/Dockerfile.24.04

@@ -24,7 +24,7 @@ RUN mkdir /rootfs \
         dotnet-runtime-8.0_libs
 RUN install -d -m 0755 -o "$UID" -g "$GID" "/rootfs/home/$USER" \
     && echo -e "root:x:0:\n$GROUP:x:$GID:" >/rootfs/etc/group \
-    && echo -e "root:x:0:0:root:/root:/noshell\n$USER:x:$UID:$GID::/home/$USER:/noshell" >/rootfs/etc/passwd
+    && echo -e "root:!:0:0:root:/root:/noshell\n$USER:x:$UID:$GID::/home/$USER:/noshell" > /rootfs/etc/passwd
 
 FROM scratch AS sbom-prep
 COPY --from=builder /rootfs /