Hardcode the dockerx user for now - if you use $UID when su'd, it gets a little more hairy
yup, chromium now runs in a container