This. If you must have rooted containers docker-compose is only a
rpm-ostree install docker-compose
away, but that's a big ass layer, you'll feel it every update, and insecure to boot (yes I know docker finally got userspace, but how many times have you seen it used? Everywhere it's root.). Run your docker-compose file through podlet, and there you go, userspace quadlets (95+% of the time, every time...). They're easy to love once you get your head around them.