[btashton]

This is one of the reasons I run podman instead where I can and don't just give users access to the docker service. You can also run buildkit in rootless mode

[cpuguy83]

You can also run Docker in rootless mode.