Some time ago I have done something similar: https://github.com/grzegorzk/ff_in_podman It's interesting to see, that hardened browser executed from container is actually quite unique setup (and hence, in a way, easy to spot unless many people are using same setup).