my limited knowledge of container engineering dynamics says that we likely need some further work to make the UID/GID properly arbitrary so that the home folder is correctly owned as the running user which makes the issue go away fully from the perspective of r10k at that point