all: CI and misc updates

misc/rebuild-stubs-with-podman/Dockerfile

@@ -1,5 +1,5 @@
 FROM docker.io/library/ubuntu:22.04
-ENV UPX_CONTAINER_IMAGE_NAME=upx-stubtools-20221212-v5
+ENV UPX_CONTAINER_IMAGE_NAME=upx-stubtools-20221212-v6
 ARG DEBIAN_FRONTEND=noninteractive
 ENV LANG=C.UTF-8
 
@@ -7,16 +7,16 @@ ENV LANG=C.UTF-8
 RUN dpkg --add-architecture i386 \
     && apt-get update && apt-get upgrade -y \
     && apt-get install -y --no-install-recommends \
-        aria2 bash-completion ca-certificates git less libmpc3 libncurses5 \
-        make ncurses-term perl-base python2-minimal wget xz-utils \
+        aria2 bash bash-completion ca-certificates dash git less libmpc3 libncurses5 \
+        make ncurses-term perl-base python2-minimal time wget xz-utils \
         libc6:i386 zlib1g:i386 \
         # the following packages are not required for rebuilding the stubs, but
-        # they do make the image much more convenient and also allow building
+        # they do make the image *much* more convenient and also allow building
         # the full UPX binary inside the container via CMake:
-        7zip bfs bzip2 cabextract chrpath cmake cpio curl elfutils fd-find file fzf g++ gdb gojq \
-        ht htop hyperfine jq libzstd-dev lsb-release lz4 lzip lzop moreutils ninja-build \
-        p7zip parallel patch patchelf pax-utils paxctl re2c ripgrep rsync \
-        screen universal-ctags unzip vim zip zlib1g-dev zsh zstd \
+        7zip bfs busybox bzip2 cabextract ccache chrpath cmake cpio curl elfutils fd-find file fzf \
+        g++ gawk gdb gojq ht htop hyperfine jq libzstd-dev lsb-release lz4 lzip lzop \
+        mksh moreutils ninja-build p7zip parallel patch patchelf pax-utils paxctl \
+        re2c ripgrep rsync screen universal-ctags unzip vim yash zip zlib1g-dev zsh zstd \
         # extra packages for compiling with "gcc -m32" and and "gcc -mx32":
         g++-multilib gcc-multilib \
     && true
@@ -52,8 +52,12 @@ RUN cd /root \
 
 # create default user upx 2000:2000
 RUN useradd upx -U --uid 2000 --shell /bin/bash -m \
-    && mkdir -p /home/upx/.cache/zig /home/upx/.local/bin /home/upx/.wine /home/upx/src/upx \
-    && ln -s /usr/local/bin/bin-upx-20221212 /home/upx/.local/bin/bin-upx \
-    && chown -R upx:upx /home/upx \
+    && cd /home/upx && chmod 700 . \
+    && mkdir -p .cache .local src/upx \
+    && for d in ccache go-build tmp wine zig; do mkdir -p .cache/$d; done \
+    && for d in bin share state; do mkdir -p .local/$d; done \
+    && ln -s .cache/wine .wine && ln -s .cache/tmp tmp \
+    && ln -s /usr/local/bin/bin-upx-20221212 .local/bin/bin-upx \
+    && chown -R upx:upx . \
     && true
 USER upx