Measured the rootless mapping: container root IS the invoking user (dank, owner of the /opt data dirs); the images' default users (loki 10001, prometheus nobody, grafana 472) map to subuids that own nothing. 1000:1000 was the wrong direction.
Measured the rootless mapping: container root IS the invoking user (dank, owner of the /opt data dirs); the images' default users (loki 10001, prometheus nobody, grafana 472) map to subuids that own nothing. 1000:1000 was the wrong direction.