That should do it, as long as both host and container systems implement the nobody user on the same ID. Which is likely. But I'd check all the same