How can container user and host user both have access to same files in volume?
I was tripping myself up: when I was trying the --user flag, I still had --userns-remap set. Running the daemon without --userns-remap did the trick.