Fix #139 (allow app-user to list home even without explicit entrypoint.py prep)

[simonmicro]

Fixes #139

[Copilot]

Pull request overview

Updates the Docker runtime/permissions and startup scripts to address issue #139 where running the container as a non-root user could not import modules from /home/py-kms (e.g., pykms_RpcBind), and to improve startup/shutdown logging and UID/GID handling.

Changes:

• Adjust Dockerfile permission-hardening to make /home/py-kms traversable/readable for non-owner users (supporting non-root execution).
• Refine entrypoint.py UID/GID change logic and logging, including clearer non-root warnings.
• Add additional shutdown/termination logs in start.py and log level/UID/GID logging in both scripts.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File	Description
docker/start.py	Adds shutdown/process termination logging and improves startup log output.
docker/entrypoint.py	Updates UID/GID switching logic (better diagnostics + early exits) and improves runtime identity logging.
docker/docker-py3-kms/Dockerfile	Changes hardening to 0444/0555 permissions to allow non-root users to traverse/read /home/py-kms.
docker/docker-py3-kms-minimal/Dockerfile	Same permission-hardening adjustment as the full image.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.