I am running the latest docker image and have a similar issue. Running 7.0.2 on Docker CE with Portainer.
The user and group defined by the default variables are splunk splunk
However when I check the files in the /etc volume they are all owned by docker with the exception of modified files which become owned by root.
The container stops with error 13 access denied web.conf
Running the container with environment variables set to root, allows the container to start.
Something is a miss with the ownership when this container makes changes to the file system. For now I'm just running it as root:root
... View more