keep USER env in container