Go a different way with running as the right user.
Deduce the uid and gid from the volume owner and run as those. Don't need to mount /etc/passwd and /etc/group inside the container (didn't work with --user anyway). No hard-coded uids/ users anymore.