/var/lib/one/images/ is in opennebula 3.4.1-4.1ubuntu1.
This file is owned by root:root, with mode 0o755.