mirror-env/todo/users

setup role for container

• create users (and their home dirs)
  • mirror (most mirror related things are owned by this user)
  • local (does nothing)
  • push (stores some authorized_keys so upstream can push to us)
  • csc-mirror (system user, donno what does)
• modify ssh config to allow root login
• copy over ssh public keys (if provided)