diff --git a/.devcontainer/Dockerfile b/.devcontainer/Dockerfile
index ee5edb5..f8c6ca6 100644
--- a/.devcontainer/Dockerfile
+++ b/.devcontainer/Dockerfile
@@ -27,6 +27,10 @@ RUN groupadd --gid $USER_GID $USERNAME && \
     echo "$USERNAME ALL=(root) NOPASSWD:ALL" > /etc/sudoers.d/$USERNAME && \
     chmod 0440 /etc/sudoers.d/$USERNAME
 
+# Owned by the dev user so folders can be created next to the project. Docker
+# would otherwise create it as root when bind mounting /workspaces/max.
+RUN mkdir /workspaces && chown $USERNAME:$USERNAME /workspaces
+
 # Project venv, owned by the dev user so pip works without sudo
 ENV VIRTUAL_ENV=/opt/venv
 RUN python -m venv $VIRTUAL_ENV && chown -R $USERNAME:$USERNAME $VIRTUAL_ENV