Podman is an alternative to Docker, providing a similar interface. It supports rootless containers and a shim service for docker-compose.

Podman is different from Docker in that it does not require a separate daemon to run containers, making it more lightweight and secure

It also wont change iptables or firewalld for some reason as docker, so it can perfect support tun or other network proxy.

Also, it's rootless. Hacking podman container not means get root permission.