https://github.com/containers/skopeo in a non-root Docker image