you can run containers without root, suid bits or special capabilities with podman.

of course, withouth any of that your containers will be able to do very little (eg: no networking).