added some tools for CI, use unprivileged user