Docker alternatives for AI agents: Podman, bwrap and Firejail | Dark Hacker News