@phoenixmage Part of the issue is that you’re attempting to use s3fs on top of the container storage which is an aufs or overlay filesystem depending on the storage driver used. I suggest you don’t use s3fs on the container filesystem and instead move everything in the /data directory in your container which is a docker volume. Docker volumes are simple bind mounts of the underlying filesystem and should preserve acls just fine.