https://bugzilla.redhat.com/show_bug.cgi?id=2333529
--- Comment #10 from Alexey Tikhonov atikhono@redhat.com --- (In reply to Gregory Lee Bartholomew from comment #9)
IMHO, SSSD should get one of the reserved UIDs in the 0-200 range so it will be the same across different installations and bind mounts between them would have correct ownership.
This is quite old standing idea: https://pagure.io/packaging-committee/issue/570
But take a note this wouldn't help if host and container run different OS.