// ... "remoteUser": "xxx", "containerUser": "xxx", "workspaceMount": "source=${localWorkspaceFolder},target=/workspace,type=bind,Z", "workspaceFolder": "/workspace", "runArgs": ["--userns=keep-id"] // For rootless podman, root inside container: "workspaceMount": "source=${localWorkspaceFolder},target=/workspace,type=bind,Z", "workspaceFolder": "/workspace"