Regarding the fiddly permissions between host and container, at least on Linux podman seems to be the solution. It is command line compatible to docker (and us

Regarding the fiddly permissions between host and container, at least on Linux podman seems to be the solution. It is command line compatible to docker (and uses the same image format), but instead of launching containers through a demon, it launches container directly as the calling user (needs user namespaces, Linux 3.8+). Now you can share volumes between host and container, and don't run into those pesky permission problems that come from different UIDs on the inside and outside. Very useful in CI contexts, for development environment and so on.