Interestingly enough, on a Mac, it doesn’t propagate the ownership changes back to the host, or at least not for me :). I think it’s related to the fact that the /var/run/docker.sock is mounted with root:root ownership, ignoring any host settings for the socket file.