Running sshd inside bubblewrap

chown(/dev/pts/1, 1001, 5) failed: Operation not permitted

# Start building the bwrap arguments array
# We run as root, so we map the host UID 0 to container UID 0
BWRAP_ARGS=(
    # Can't use --unshare-all because we need to share user and it doesn't have a flag for that
    --unshare-ipc
    --unshare-pid
    --unshare-uts
    --unshare-cgroup
    # We must SHARE net to allow SSHD to listen on the host interface
    --share-net
    #--share-user

    # Process management
    --die-with-parent
    --new-session

    # Base Filesystem
    --bind "$CHROOT_DIR" /

    # System Directories
    --bind /proc /proc          # Bind container /proc
    --dev-bind /dev /dev        # Bind container /dev (needed for GPU devices)
    --bind /sys /sys            # Bind container /sys (needed for driver info)
    --tmpfs /tmp                # Clean tmp
    --tmpfs /run                # Clean run
    --dir /run/sshd             # Ensure directory for sshd socket exists

    # Capabilities
    --cap-add CAP_SYS_CHROOT
    --cap-add CAP_SETUID
    --cap-add CAP_SETGID

    # Data Persistence
    --bind /data/home /home
)

...

exec unshare --map-root-user --map-auto \
        bwrap "${BWRAP_ARGS[@]}" \
        /usr/sbin/sshd -D -e -o LogLevel=VERBOSE