I think the canonical way (at least a while ago) was to only manipulate volumes using containers. There might be other solutions available now but this one seem

I think the canonical way (at least a while ago) was to only manipulate volumes using containers. There might be other solutions available now but this one seems to be the easiest, as it does not require to change the permissions or ownership on the files/volumes being manipulated.