Make hadoop namenode work. Essentially the mistake there was that USER is unset in the container so the pid file wasn't popping out where I expected. Life was made harder by /run being a tmpfs in the container thus invisible from outside.
Various corrections elsewhere.