Definitely podman + podman compose.

Its fully open source (docker isn’t) and its secure by design (security has been added to docker as an after fought).

Also podman is rootless by design, docker takes a bit of effort to run root less.