diff --git a/stm32/.gitignore b/stm32/.gitignore
index 473f3c3a..fa21dbd4 100644
--- a/stm32/.gitignore
+++ b/stm32/.gitignore
@@ -8,7 +8,6 @@ mpy-files.timestamp
 firmware.lss
 firmware-signed.*
 firmware.elf
-file_time.c
 *-RC1-coldcard.dfu
 
 # somewhat useful binary snapshots
diff --git a/stm32/COLDCARD_Q1/file_time.c b/stm32/COLDCARD_Q1/file_time.c
new file mode 100644
index 00000000..59c5abfb
--- /dev/null
+++ b/stm32/COLDCARD_Q1/file_time.c
@@ -0,0 +1,13 @@
+// (c) Copyright 2020-2024 by Coinkite Inc. This file is covered by license found in COPYING-CC.
+//
+// AUTO-generated.
+//
+//   built: 2024-03-10
+// version: 1.0.0Q
+//
+#include <stdint.h>
+
+// this overrides ports/stm32/fatfs_port.c
+uint32_t get_fattime(void) {
+    return 0x586a0800UL;
+}
diff --git a/stm32/Makefile b/stm32/Makefile
index 7436b634..73591568 100644
--- a/stm32/Makefile
+++ b/stm32/Makefile
@@ -15,6 +15,6 @@
 
 clean clobber rc1 release repro:
 	$(MAKE) -f Q1-Makefile $(MAKECMDGOALS)
-	$(MAKE) -f MK4-Makefile $(MAKECMDGOALS)
+# 	$(MAKE) -f MK4-Makefile $(MAKECMDGOALS)
 
 # EOF
diff --git a/stm32/shared.mk b/stm32/shared.mk
index 150dffe2..c5e8713a 100644
--- a/stm32/shared.mk
+++ b/stm32/shared.mk
@@ -243,7 +243,7 @@ setup:
 # - works from this repo, but starts with copy of HEAD
 DOCK_RUN_ARGS = -v $(realpath ..):/work/src:ro \
 				-v $(realpath built):/work/built:rw \
-				--privileged coldcard-build
+				-u $$(id -u):$$(id -g) coldcard-build
 repro: code-committed
 repro: 
 	docker build -t coldcard-build - < dockerfile.build