Microsoftgraph Docker Image problem - GitLab pipeline

[ScatchyMonkey]

Hi - I'm referencing the latest Docker image, mcr.microsoft.com/microsoftgraph/powershell from a local container registry in a GitLab CICD pipeline to allow me to issue various Graph SDK commands as part of some Entra automation I'm building.

The GitLab Runner is a Kubernetes executor and exposes a cut-down Linux environment (no sudo!) to run the PowerShell code in the pipeline, but the process is restricted from accessing administrative folders in that Linux OS for security purposes. Additionally, while Entra's Graph API is accessible, general internet access from GitLab is blocked, again for security purposes.

While the pipeline successfully triggers the Docker image's installation of 'base' PowerShell modules into the /opt/Microsoft/powershell/7/Modules folder, the Microsoft.Graph module itself is instead installed into the administrative /root/.local/share/powershell/Modules folder. The upshot of this behaviour is that the pipeline isn't able to reference the Microsoft.Graph module at all (I'm not even sure if it even had permissions to install it in the first place).

To help clarify, this pipeline output shows the location that those 'base' modules are installed to:

$ pwsh -Command 'Get-Module -ListAvailable'

    Directory: /opt/microsoft/powershell/7/Modules

ModuleType Version    PreRelease Name                                PSEdition
---------- -------    ---------- ----                                ---------
Manifest   1.2.5                 Microsoft.PowerShell.Archive        Desk
Manifest   7.0.0.0               Microsoft.PowerShell.Host           Core
Manifest   7.0.0.0               Microsoft.PowerShell.Management     Core
Binary     1.0.4.1               Microsoft.PowerShell.PSResourceGet  Core,Desk
Manifest   7.0.0.0               Microsoft.PowerShell.Security       Core
Manifest   7.0.0.0               Microsoft.PowerShell.Utility        Core
Script     1.4.8.1               PackageManagement                   Desk
Script     2.2.5                 PowerShellGet                       Desk
Script     2.3.5                 PSReadLine                          Desk
Binary     2.0.3                 ThreadJob                           Desk

While this shows the output from a subsequent search for the Microsoft.Graph module file, where various locations are prevented from being searched, including the '/root' folder:

$ pwsh -command "Get-ChildItem -Path / -Recurse -Filter 'Microsoft.Graph.psd1' 2>&1"

Get-ChildItem: Access to the path '/etc/ssl/private' is denied.
Get-ChildItem: Access to the path '/proc/tty/driver' is denied.
Get-ChildItem: Access to the path '/root' is denied.
Get-ChildItem: Access to the path '/var/cache/apt/archives/partial' is denied.
Get-ChildItem: Access to the path '/var/cache/ldconfig' is denied.

My questions are :

1. Why does the Graph module install into a different folder than the rest of the 'base' modules?
2. Is there a way to redirect the install Graph into that 'base' module folder?

Note: image:entrypoint doesn't work, it just changes the 'working directory' of the pipeline, not the installation location of the image into Linux.

Thanks.