Hi 👋
I'm trying to write a Helm chart around this Docker image in order to make this run on a Kubernetes Cluster within our institution.
At my institution, we have the strict requirement that all Containers run as non-root and with a read-only root filesystem.

From what I could gather by looking into the Dockerfile, as well as entrypoint.sh, a lot of tasks are performed as root on runtime. Furthermore, the Dockerfile specifies that the container runs as root in one of the very last lines.

It'd be great, not only for me/us, but others also, if these constraints could be supported.