dockerd should be the only process running if no other containers are running. You can also have containers use host-mode networking (share's the host's NICs i

dockerd should be the only process running if no other containers are running. You can also have containers use host-mode networking (share's the host's NICs instead of using bridged networking via virtual NICs) if local IP address pollution is a concern. Kata is just a container runtime. Depending on how they implement their network and storage drivers, functionality should be mostly the same.