[eriksjolund]

Podman can run a socket-activated network server (such as docker.io/library/nginx) with the "--network=none" option. This improves security.