The official image just pushed an update to all tags which sets capabilities on runtime and thus breaks read only environments. Gotta make my own image later.
This should prevent another 5gb log file :/