As a fun fact, you can also run:

    $ systemctl --user enable --now podman.socket
    $ export DOCKER_HOST=unix:///run/user/$UID/podman/podman.sock

and get a rootless, Docker-compatible socket. If you're running, e.g., a test suite written against the Go Moby APIs, this will execute the containers with Podman rather than with the system daemon.