Podman definitely the preferable option but a lot of docs assume docker so more tinkering might be in your way.

Docker, if we must.

Personally I prefer Podman due to better network implementation (via netavaark). Works with nftables natively (without compatibility wrappers such as iptables-nft).