Custom images get sudo, adduser and useradd
Every image Runtime builds, from a public image too, gives the sandbox user passwordless sudo, and the base image now carries adduser and useradd. A command in a sandbox from an image starts in the image's last WORKDIR (inside /workspace). Build logs number only the steps they log.