feat(dotnet 6.0): add shadow file to chiseled rootfs (#777)

* feat: add shadow file to chiseled rootfs

* chore(deps): update ubuntu.azurecr.io/ubuntu:22.04 docker digest to ce8fb30 (#785)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update ubuntu.azurecr.io/ubuntu:22.04 docker digest to b160411 (#789)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update hadolint/hadolint-action action to v3.3.0 (#781)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix: lock root accoun via passwd file

---------

Signed-off-by: zhijie-yang <zhijie.yang@canonical.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: zhijie-yang <zhijie.yang@canonical.com>

Author: 3 people

dotnet-aspnet/Dockerfile.22.04

@@ -19,7 +19,7 @@ RUN chmod +x /usr/bin/chisel-wrapper
 RUN mkdir -p /rootfs/etc \
     && install -d -m 0755 -o "$UID" -g "$GID" "/rootfs/home/$USER" \
     && echo -e "root:x:0:\n$GROUP:x:$GID:" >/rootfs/etc/group \
-    && echo -e "root:x:0:0:root:/root:/noshell\n$USER:x:$UID:$GID::/home/$USER:/noshell" >/rootfs/etc/passwd
+    && echo -e "root:!:0:0:root:/root:/noshell\n$USER:x:$UID:$GID::/home/$USER:/noshell" > /rootfs/etc/passwd
 
 RUN chisel-wrapper --generate-dpkg-status /status -- --release "ubuntu-$UBUNTU_RELEASE" --root /rootfs \
     base-files_base \

dotnet-aspnet/Dockerfile.22.10.unsupported

@@ -23,7 +23,7 @@ ARG USER UID GROUP GID
 RUN mkdir -p /rootfs/etc \
     && install -d -m 0755 -o $UID -g $GID /rootfs/home/$USER \
     && echo -e "root:x:0:\n$GROUP:x:$GID:" >/rootfs/etc/group \
-    && echo -e "root:x:0:0:root:/root:/noshell\n$USER:x:$UID:$GID::/home/$USER:/noshell" >/rootfs/etc/passwd
+    && echo -e "root:!:0:0:root:/root:/noshell\n$USER:x:$UID:$GID::/home/$USER:/noshell" > /rootfs/etc/passwd
 
 FROM scratch AS image-prep
 ENV \

dotnet-deps/Dockerfile.22.04

@@ -18,7 +18,7 @@ RUN chmod +x /usr/bin/chisel-wrapper
 RUN mkdir -p /rootfs/etc \
     && install -d -m 0755 -o "$UID" -g "$GID" "/rootfs/home/$USER" \
     && echo -e "root:x:0:\n$GROUP:x:$GID:" >/rootfs/etc/group \
-    && echo -e "root:x:0:0:root:/root:/noshell\n$USER:x:$UID:$GID::/home/$USER:/noshell" >/rootfs/etc/passwd
+    && echo -e "root:!:0:0:root:/root:/noshell\n$USER:x:$UID:$GID::/home/$USER:/noshell" > /rootfs/etc/passwd
 
 RUN chisel-wrapper --generate-dpkg-status /status -- --release "ubuntu-$UBUNTU_RELEASE" --root /rootfs \
     base-files_base \

dotnet-deps/Dockerfile.22.10.unsupported

@@ -23,7 +23,7 @@ ARG USER UID GROUP GID
 RUN mkdir -p /rootfs/etc \
     && install -d -m 0755 -o $UID -g $GID /rootfs/home/$USER \
     && echo -e "root:x:0:\n$GROUP:x:$GID:" >/rootfs/etc/group \
-    && echo -e "root:x:0:0:root:/root:/noshell\n$USER:x:$UID:$GID::/home/$USER:/noshell" >/rootfs/etc/passwd
+    && echo -e "root:!:0:0:root:/root:/noshell\n$USER:x:$UID:$GID::/home/$USER:/noshell" > /rootfs/etc/passwd
 
 FROM scratch AS image-prep
 ENV \

dotnet-runtime/Dockerfile.22.04

@@ -18,7 +18,7 @@ RUN chmod +x /usr/bin/chisel-wrapper
 RUN mkdir -p /rootfs/etc \
     && install -d -m 0755 -o "$UID" -g "$GID" "/rootfs/home/$USER" \
     && echo -e "root:x:0:\n$GROUP:x:$GID:" >/rootfs/etc/group \
-    && echo -e "root:x:0:0:root:/root:/noshell\n$USER:x:$UID:$GID::/home/$USER:/noshell" >/rootfs/etc/passwd
+    && echo -e "root:!:0:0:root:/root:/noshell\n$USER:x:$UID:$GID::/home/$USER:/noshell" > /rootfs/etc/passwd
 
 RUN chisel-wrapper --generate-dpkg-status /status -- --release "ubuntu-$UBUNTU_RELEASE" --root /rootfs \
     base-files_base \

dotnet-runtime/Dockerfile.22.10.unsupported

@@ -23,7 +23,7 @@ ARG USER UID GROUP GID
 RUN mkdir -p /rootfs/etc \
     && install -d -m 0755 -o $UID -g $GID /rootfs/home/$USER \
     && echo -e "root:x:0:\n$GROUP:x:$GID:" >/rootfs/etc/group \
-    && echo -e "root:x:0:0:root:/root:/noshell\n$USER:x:$UID:$GID::/home/$USER:/noshell" >/rootfs/etc/passwd
+    && echo -e "root:!:0:0:root:/root:/noshell\n$USER:x:$UID:$GID::/home/$USER:/noshell" > /rootfs/etc/passwd 
 
 FROM scratch AS image-prep
 ENV \