Because of issues like https://lwn.net/Articles/779542/rss it's a good idea to change make root inside the container have a different uid than root on the host. https://docs.docker.com/engine/security/userns-remap/
The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!