diff --git a/tests/setup/docker-compose-francis.yml b/tests/setup/docker-compose-francis.yml
index 4b7351d8..894913dc 100644
--- a/tests/setup/docker-compose-francis.yml
+++ b/tests/setup/docker-compose-francis.yml
@@ -15,7 +15,6 @@ services:
     image: ghcr.io/italypaleale/francis:${FRANCIS_VERSION:?run ./francis-version.sh to set it, see CONTRIBUTING.md}
     volumes:
       - ./francis-config.yaml:/etc/francis/config.yaml:ro
-      - francis-test-data:/data
     # The image ships its own HEALTHCHECK, which probes the runtime over the loopback
     # It's repeated here so Pocket ID can wait on it, and so a runtime that never comes up fails fast instead of after the default retries
     healthcheck:
@@ -47,4 +46,3 @@ services:
 
 volumes:
   pocket-id-test-data:
-  francis-test-data:
diff --git a/tests/setup/francis-config.yaml b/tests/setup/francis-config.yaml
index 6c490807..ef4f682a 100644
--- a/tests/setup/francis-config.yaml
+++ b/tests/setup/francis-config.yaml
@@ -15,9 +15,10 @@ bootstrap:
   hostPSK: "e2e-host-bootstrap-psk-0123456789"
 
 # The runtime owns its own SQLite store, which is separate from Pocket ID's database
-# It lives on a volume because the image runs as a non-root user that cannot write to the image filesystem
+# It lives in /tmp because the image runs as a non-root user (uid 65532) and that is the only world-writable directory in it
+# The store only has to survive as long as the containers do, so there is nothing to persist beyond the test run
 provider:
-  connectionString: "/data/francis.db"
+  connectionString: "/tmp/francis.db"
 
 # A single Pocket ID replica joins the cluster, matching the cap the embedded runtime applies when HA is off
 maxHosts: 1