They’re working on signing: https://docs.docker.com/engine/security/trust/ https://docs.docker.com/engine/security/trust/ They have a rootless mode: https://do

They’re working on signing: https://docs.docker.com/engine/security/trust/ https://docs.docker.com/engine/security/trust/ They have a rootless mode: https://docs.docker.com/engine/security/rootless/ https://docs.docker.com/engine/security/rootless/ Firewall situation is mixed: https://docs.docker.com/engine/network/packet-filtering-firewalls/#integration-with-firewalld https://docs.docker.com/engine/network/packet-filtering-fire... It’s a bummer that those aren’t the defaults, but it would directly make things less convenient and therefore make people less likely to use it (same reason why installing various software is still offered as a Bash script that you curl and pipe to your terminal, e.g. Ollama; at least it’s not offered as the only way usually), what a world.