This is exactly how the work. You either specify the user when creating the container (which can have certain implications, like being able to bind to < port 1

This is exactly how the work. You either specify the user when creating the container (which can have certain implications, like being able to bind to < port 1024... solveable but still something to deal with) or you can for everything to run with a uid mapping such that uids in the container are mapped to higher uids on the host.