Oh and for those scripts the user needs paswordless sudo and needs to be part of the docker group, or you could add it to root’s cron tab. Or maybe a systemd task. (Since the default ansible deploy of lemmy makes the pict-rs volume not readable by a normal system user)