Patch

grob/docker-entrypoint.sh

@@ -1,9 +1,14 @@
 #!/bin/sh
+set -euo pipefail
+
+# Ensure the ctf user exists (defensive in case the base image changes)
+if ! id ctf >/dev/null 2>&1; then
+  useradd -m -u 1001 ctf
+fi
 
 # Ensure the history directory exists and has correct ownership
 mkdir -p /app/history
 chown -R ctf:ctf /app/history
 
 # Run the grob service as ctf user
-exec runuser -u ctf /app/grob
-
+exec runuser -u ctf -- /app/grob