Disable the docker.service unit but don't disable docker.sock. Docker won't be running at startup but will transparently start on first invokation.

Configure daemon address pools in case they conflict/intersect with real network addresses.