Do not use bug UID/GID

[akostadinov]

Describe the bug
Hello. Using a high uid/gid for files in the image requires reserving a lot of uids/gids per operating system user user when running docker rootless or podman rootless.

It would be more practical to keep nonroot to be 1000 or 1001. If no files are owned by nobody, then maybe it doesn't matter so much which uid does it have assigned.

To Reproduce

$ cat /etc/subuid
user:10000:2000
$ podman pull gcr.io/distroless/static:nonroot

Expected behavior
Should just work without an error.

Console Output

Error: creating build container: copying system image from manifest list: writing blob: adding layer with blob "sha256:383e1c5dd0c1830143b1230e90292ebd4219911e0512b70d250c8907c4899110": processing tar file(potentially insufficient UIDs or GIDs available in user namespace (requested 65532:65532 for /home): Check /etc/subuid and /etc/subgid if configured locally and run podman-system-migrate: lchown /home: invalid argument): exit status 1

[loosebazooka]

I think this is something that might be hard to change without breaking a ton of people that depend on distroless conventions.

[polarathene]

It was likely due to misconfiguration on the users end.

When running rootless, /etc/subuid and /etc/subgid should be setup properly. On distros like Fedora this is automatically handled IIRC. There's a little bit more changes required when correcting that on such a misconfigured environment, and then it should be fine (as detailed here).