Haven't tried anything yet. Just wondering if this is an idiomatic use case to grant container access to global resources.

Yes, it's idiomatic, but typically you will use shared filesystem access rather than shared memory. By default nothing is shared, and you can specify exceptions using shared directories called "volumes": http://docs.docker.io/en/master/use/working_with_volumes/