[rbut]

Here's our experience with rootless docker.

We've used it in a single-user (a docker user) and multi-user (user for each dev) environment.

Most, if not all, containers work fine, there are some, like mailcow which don't work well with it.

If you have multiple IPs on the one machine, there is a longstanding bug that means you can't bind the same port on different IPs. Eg IP1:80 and IP2:80. The workaround for this is separate rootless docker users + runtime for each container that shares ports, nasty.

In a multi-user environment we simply setup rootless docker under each devs user, so they have their own runtime and their own containers isolated from other devs. This works really well.

Overall it works well for us.