Comment by rbut

I would recommend using Rootless Docker over this cheat sheet. It makes half the issues they are trying to work around redundant. It also solves the issue with Docker punching a hole through UFW..

https://docs.docker.com/engine/security/rootless/