// ...
	"remoteUser": "xxx",
	"containerUser": "xxx",
	"workspaceMount": "source=${localWorkspaceFolder},target=/workspace,type=bind,Z",
	"workspaceFolder": "/workspace",
	"runArgs": ["--userns=keep-id"]