Podman definitely the preferable option but a lot of docs assume docker so more tinkering might be in your way. 

 Docker, if we must.  

 Personally I prefer Podman due to better network implementation (via netavaark). Works with nftables natively (without compatibility wrappers such as iptables-nft).