which just sounds like a permissions issue, but it's not clear to me how to reason about what should work from the second container, what should not, and how to work around it when it doesn't work etc?