If you control the services, make them read from user-writable files instead of root ones. (Ideally you could skip the middleman and just read from env vars dir

If you control the services, make them read from user-writable files instead of root ones. (Ideally you could skip the middleman and just read from env vars directly!) If you don't control the services, maybe in the Dockerfile you could write a dummy config file and chmod it?