E.g. ownership is convoluted, and the flat dir belongs to root :-( That's probably because the container is not run rootless (our containers do support that btw) and so root inside the container maps to root outside the container. It always takes a bit of effort to get these things ...