Today I learned how to setup rootless containers with podman.

It requires cgroups v2 and crun (runc does not support cgroups v2 yet). It also requires slirp4netns for internet connection, fuse-overlay and shadow-utils to set subuid/subgid

rootless setup - libpod github