Rootless is definitely the way to go. You can forward ports manually on the host if you really need to use privileged ports. I generally expose my containers th

Rootless is definitely the way to go. You can forward ports manually on the host if you really need to use privileged ports. I generally expose my containers through a reverse proxy, running bare metal on the host, and that completely bypasses the privileged port issue.