don't worry. if you're in this situation with this attitude, you're likely running out of date container base images and whatnot.

i highly suggest you forget about containers, learn about systemd unit file hardening, and then you only have to play sysadmin to your base os and the binary for the program you want to run.