@laru @rose yeah that's mainly a sandboxing and configuration issue, the problem is that services are allowed to do whatever the fuck, conventions are rarely respected and most distros don't bother to unfuck this
OCI doesn't solve the problem so much as it constrains your services into individual boxes that encompass all the data they store
all that at the cost of huge images which mostly can't share contents and are cooked up by people who rarely have a clue what they're doing (pic related)