don't need sudoers
just chmod run.sh in repo; not in Dockerfile
add VOLUME for projects