To be clear, you have a (user:group) 1000:1000 on both containers? What about having the same mapping of Uid and Gid on the host? I assume the host is a desktop distro, and they usually have it already. You would require the three, so that permissions are “coherent” between each system