Similar answer to what I mentioned in Pros and cons of putting each container under separate user vs single lxc user - #2 by stgraber, what really matters is the content of the lxc.idmap for the container, what user spawned it doesn’t matter a lot unless it’s useful to control who can manage what container.