The container runs as root, but cannot write

A root sidecar, an owner-only bind mount and dropped capabilities: why Docker permissions failed, and why the fix was less privilege, not more.

By Robertito