Add --privileged flag (required for encryption support), --user root flag (required by live-build), build in /tmp container directory (not mounted volume), and remove problematic flags for successful build with encryption support. 💘 Generated with Crush Assisted-by: GLM-4.7 via Crush <crush@charm.land>