Hi! It seems layer.tar doesn't include the xattrs (security.capability) for binaries that require this (like usr/bin/newgidmap) (This is for example part of releases/39/Container/x86_64/images/ Fedora-Container-Base-39-1.5.x86_64.tar.xz) I guess it's a simple --xattrs and/or --xattrs-include at some place but I cannot find where it is created (so I can create a PR). I've also reported https://github.com/fedora-cloud/docker-brew-fedora/issues/114 a month ago but I didn't got any reaction there. I hope someone can help, Dick