Apache's own pidfile write there depends on an implicit overlay copy-up
succeeding, which in turn depends on the container's rootless UID mapping
matching whatever the image layer was extracted under. Found failing with
"(75) Value too large for defined data type" on a host whose subuid range
had drifted from the fleet-standard 100000 base -- nextcloud had been
running fine for days before that, since the implicit copy-up happened to
work under the old mapping by coincidence, not by design.
Matches indeedhub's identical --tmpfs /run precedent for the same class
of baked web-server scratch directory.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>