Make bindfs mapping bidirectional, remove host USER name from env (#901)

.github/workflows/label.yml

@@ -1,5 +1,5 @@
 name: Labeler
-on: [pull_request]
+on: [pull_request_target]
 
 jobs:
   label:

os/debian/Dockerfile.debian

@@ -55,7 +55,7 @@ RUN python3 -m pip install --upgrade --progress-bar off pip setuptools wheel &&
     pip install --progress-bar off -r /requirements.txt --prefix=/usr/local --no-build-isolation
 
 # Remove Python cache files
-RUN find / -name __pycache__ -exec rm -rf {} \; -prune
+RUN find / -xdev -name __pycache__ -exec rm -rf {} \; -prune
 
 #
 # Geodesic base image

rootfs/etc/profile.d/_20-localhost.sh

@@ -15,7 +15,7 @@ if [[ $SHLVL == 1 ]] && [[ -n $GEODESIC_HOST_UID ]] && [[ -n $GEODESIC_HOST_GID
 		red "#  * Verify that content under /localhost is what you expect."
 		red "#  * Report the issue at https://github.com/cloudposse/geodesic/issues"
 		red "#  * Include the output of \`env | grep GEODESIC\` and \`df -a\` in your issue description."
-	elif bindfs -o nonempty ${GEODESIC_BINDFS_OPTIONS} --create-for-user="$GEODESIC_HOST_UID" --create-for-group="$GEODESIC_HOST_GID" "${GEODESIC_LOCALHOST}" /localhost; then
+	elif bindfs -o nonempty ${GEODESIC_BINDFS_OPTIONS} "--map=${GEODESIC_HOST_UID}/0:@${GEODESIC_HOST_GID}/@0" "${GEODESIC_LOCALHOST}" /localhost; then
 		green "# BindFS mapping of ${GEODESIC_LOCALHOST} to /localhost enabled."
 		green "# Files created under /localhost will have UID:GID ${GEODESIC_HOST_UID}:${GEODESIC_HOST_GID} on host."
 		export GEODESIC_LOCALHOST_MAPPED_DEVICE="${GEODESIC_LOCALHOST}"

rootfs/templates/wrapper

@@ -66,7 +66,6 @@ function use() {
 					--env SSH_CLIENT
 					--env SSH_CONNECTION
 					--env SSH_TTY
-					--env USER
 					--env USER_ID
 					--env GROUP_ID)
 			elif [ "${OS}" == 'Darwin' ] && [ "${GEODESIC_MAC_FORWARD_SOCKET}" == 'true' ]; then