The app runs as uid 1000 inside the image; folders created by the deploy user (another uid) made the container crash with EACCES on /app/data. Fixed with a one-off root container, so the script still needs no sudo. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>