Ergonomic, hermetic, user-friendly software build system for Python, Go, Java, Kotlin, Protobuf, Scala, Shell. Pants lets you fearlessly scale up your codebase!

Pants

If there are any Docker people out there, I'm curious what the state of the art is with Docker and ruining my `ufw` rules? <https://docs.docker.com/engine/network/packet-filtering-firewalls/#docker-and-ufw>

I'm not sure if I should be using the nftables backend, or if I can disable fully Docker's ability to create iptables...

&gt;  It is not possible to completely prevent Docker from creating firewall rules
<https://docs.docker.com/engine/network/packet-filtering-firewalls/#prevent-docker-from-manipulating-firewall-rules>

Loved that horrible tidbit from the docs

Alternatively, rootless Docker is an option - so long as it actually adheres to my `ufw` rules and doesn't try to outsmart anything or anyone?

Overall, looking for an admin-privilege-less installation and runtime, while being able to block outgoing connections