Interesting, it runs if I remove the mount points. It’s binding to port 8080, so nothing to do with privileged ports here. I’ll need to look into the subuid and subgid edits - I read the docs for those and understood them to be for multiple users on the same machine running the same container, didn’t realize it was for all users including my own but that makes sense. Thanks for the direction!