It’s not exactly what you’re looking for, but as an intermediate option, you may want to look into docker user namespaces.

docs.docker.com/engine/security/userns-remap/

It effectively transforms the containers’ root user into a non-root user outside the container (e.g. for filesystem accesses).