[BUG] <title> Cannot pull latest image; subordinate IDs

[jermudgeon]

Is there an existing issue for this?

• I have searched the existing issues

Current Behavior

docker-compose pull fails this is an upgrade on a known working system
You are currently running version 1.40.3.8555 on the server "plexhost". Version 1.41.0.8992 is now available.
`docker-compose pull

Pulling plex ... download complete

ERROR: for plex failed to register layer: failed to Lchown "/usr/bin/crontab" for UID 0, GID 999 (try increasing the number of subordinate IDs in /etc/subuid and /etc/subgid): lchown /usr/bin/crontab: invalid argument
ERROR: failed to register layer: failed to Lchown "/usr/bin/crontab" for UID 0, GID 999 (try increasing the number of subordinate IDs in /etc/subuid and /etc/subgid): lchown /usr/bin/crontab: invalid argument`

Expected Behavior

docker-compose pull completes successfully.

Steps To Reproduce

Running in a container (nested virtualization). Docker-compose config below.

My /etc/subgid and /etc/subuid are both
plex:100000:65536

Environment

OS is Ubuntu 22.04 (jammy) LTS, kernel is 6.18.12-1-pve
Docker is installed:
Client:
 Version:           24.0.7
 API version:       1.43
 Go version:        go1.21.1
 Git commit:        24.0.7-0ubuntu2~22.04.1
 Built:             Wed Mar 13 20:23:54 2024
 OS/Arch:           linux/amd64
 Context:           default

Server:
 Engine:
  Version:          24.0.7
  API version:      1.43 (minimum version 1.12)
  Go version:       go1.21.1
  Git commit:       24.0.7-0ubuntu2~22.04.1
  Built:            Wed Mar 13 20:23:54 2024
  OS/Arch:          linux/amd64
  Experimental:     false
 containerd:
  Version:          1.7.12
  GitCommit:        
 runc:
  Version:          1.1.12-0ubuntu2~22.04.1
  GitCommit:        
 docker-init:
  Version:          0.19.0
  GitCommit:

CPU architecture

x86-64

Docker creation

---
version: "2.1"
services:
  plex:
    image: ghcr.io/linuxserver/plex
    container_name: plex
    network_mode: host
    environment:
      - PUID=1000 #1000
      - PGID=1000 #1000
      - VERSION=docker
      - PLEX_CLAIM= #optional
    volumes:
      - /mnt/plex/config:/config
      - /mnt/plex/:/tv
      - /db:/db
      - /mnt/plex/:/movies
    restart: unless-stopped

Container logs

I'm skipping this as the version currently running works fine.

[github-actions]

Thanks for opening your first issue here! Be sure to follow the relevant issue templates, or risk having this issue marked as invalid.