Comment by znpy

you can run containers without root, suid bits or special capabilities with podman.

of course, withouth any of that your containers will be able to do very little (eg: no networking).