Thanks for the feedback. Our current Docker container does require root because it is based on our Omnibus packages.
We are working to create a set of lean containers, one for each GitLab service (Sidekiq, Unicorn, Gitaly, etc.), which will no longer require root access.