While it takes heavily from the UI, podman with user namespaces enabled is the completion of this idea for me. No more sudo requirements, greatly reduced attac

While it takes heavily from the UI, podman with user namespaces enabled is the completion of this idea for me. No more sudo requirements, greatly reduced attack surface, isolation as a "user" concern. It sits happily in my UI doing exactly what I need it to do for all these use cases.