Rather than have fixuid scan the filesystem for the files that need to be chown to the correct user, could we have fixuid scan for those files during the docker image build?
Then, when the container starts, it could use chown directly on all those files. And then fixuid would just need to do the other fix ups of the passwd file, etc, without a big disk scan.
I think that this ought to be faster.