This conversation makes me thankful that I spent time on the extra hoops to get Docker working in rootless mode. (That mode wasn't officially released yet; I imagine it's easier by now.)

It also reminds me of Podman as a promising alternative. Now that it's in Debian Stable, I think it's about time I give it a try.