> it refuses to be installed as root so it refuses to run in containers

Not sure what you are speaking about. I'm using opam as root in containers everyday. It prints a warning, but apart from that works OK. What version are you using?