if possible, ideally docker containers should not run under "root"

[yarikoptic]

for a wide range of reasons one of which is that work/ directory then belongs to root and regular user does not have permissions to delete it without sudo or abusing docker to become root to remove it.