I wonder what the effective uid is at the point where the bootstrap script is trying to make subdirectories in /var/discourse/shared; I had thought it would be root, since docker is being run as root, but apparently not?
I see nothing there about using --privileged, sadly, though I share his desire to do this all with podman instead of docker.