docker user to root for the init script to configure the network, then drops to the configured user (or root if one is not defined) for continuing booting the image.