Replaced Docker with Podman. It doesn't run as root, or even need a long-lived daemon. It has not mucked up my network interface list with almost pointless network objects. Containers all start and stop via regular service units. Got it all orchestrated via an Ansible module. Pretty sweet.