Quite a fun box! There are multiple (intended) ways to get user and root, so don’t be confused if a hint here doesn’t make any sense for what you are trying.
Feel free to send me a pm if you need a nudge, but please tell what you have already done, and where you are stuck 