The PostgreSQL RPMs automatically create the postgres user and group during
installation with their default UID/GID (26). However, the Dockerfile requires
UID/GID 70 to match the USER directive.

This commit fixes the user creation logic to:
- Check if postgres user/group already exist (created by RPM post-install)
- If they exist with wrong IDs, use usermod/groupmod to change to UID/GID 70
- If they don't exist, create them with UID/GID 70

This resolves the build failure:
  > [dependency_builder 6/8] RUN chroot /out /bin/sh -c "groupadd -g 70 postgres && adduser postgres..."
  groupadd: group 'postgres' already exists

Tested: Local build verified postgres user has UID/GID 70 in final image

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

The scanner-v4-db container was crashing with exit code 127 (command not
found) because the migration to ubi8-micro removed essential shell utilities
that the entrypoint scripts depend on.

Root cause:
- docker-entrypoint.sh uses #!/usr/bin/env bash
- ubi8-micro has no utilities pre-installed (unlike ubi8-minimal)
- The chroot commands for user creation need /bin/sh, id, etc.

This fix adds the missing packages that PR #17406 correctly included for
the main image:
- bash: Required for entrypoint scripts
- coreutils: Basic commands (id, mkdir, cat, etc.)
- findutils: File operations
- util-linux: System utilities

These packages enable the existing chroot user creation and locale setup
commands to execute successfully.

Fixes: ROX-30858
Related: #17406

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

The scanner-v4-db was still crashing with exit code 127 because PostgreSQL
binaries require the OpenLDAP runtime library (libldap_r-2.4.so.2).

Image inspection revealed:
```
$ docker run scanner-v4-db:4.10.x-81-gcc55af9924 initdb --version
initdb: error while loading shared libraries: libldap_r-2.4.so.2:
cannot open shared object file: No such file or directory
```

PostgreSQL is compiled with LDAP support and requires these libraries at
runtime even if LDAP authentication is not actively used.

This adds the openldap package which provides libldap_r-2.4.so.2 and other
LDAP client libraries needed by PostgreSQL.

Fixes: ROX-30858

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Create /var/run/postgresql with proper ownership and permissions in the
dependency_builder stage. PostgreSQL requires this directory to create
lock files (.s.PGSQL.5432.lock) during startup.

Without this directory, PostgreSQL fails with:
  FATAL: could not create lock file "/run/postgresql/.s.PGSQL.5432.lock": Permission denied

The fix uses chroot to run chown/chmod in the /out/ context where the
postgres user (UID/GID 70:70) exists, following the same pattern used
for locale setup and user creation.

Fixes scanner-v4-install-tests CI failure.
Tested locally - PostgreSQL starts successfully and accepts connections.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Simplify comments to match style from other ubi-micro migrations:
- Remove verbose section separators and header comments
- Consolidate locale setup into user creation RUN command
- Keep only meaningful comments explaining intent, not mechanics
- Remove redundant comments that duplicate what code already shows

No functional changes, only comment cleanup and minor consolidation.

Co-Authored-By: Claude Sonnet 4.5 <[email protected]>

Following the pattern from collector PR #3021, this commit:
- Adds ubi-micro-base stage and copies it to /out/ before package installation to preserve rpmdb
- Removes bash and coreutils from dnf install (already included in ubi-micro)

The previous implementation installed packages to /out/ without first copying the ubi-micro base, which could break the RPM database. This pattern ensures the minimal ubi-micro base is preserved correctly.

Co-Authored-By: Claude Sonnet 4.5 <[email protected]>
Signed-off-by: Tomasz Janiszewski <[email protected]>

PostgreSQL requires /usr/share/zoneinfo directory for timezone configuration.
ubi9-micro ships with tzdata pre-installed in the RPM database but with an
empty /usr/share/zoneinfo directory. Regular `dnf install tzdata` won't work
because the package is already present - we must use `dnf reinstall` to force
repopulation of timezone files. Use --setopt=reposdir to access build host
repos since /out/etc/yum.repos.d doesn't exist yet.

Fixes scanner-v4-db CrashLoopBackOff with error:
"could not open directory /usr/share/zoneinfo: No such file or directory"

Co-Authored-By: Claude Sonnet 4.5 <[email protected]>