Running X11 apps inside a rootless Docker container (by passing xauth cookies)

Rootless Docker is great for reducing host privileges, but GUI apps can be a bit tricky—especially...