Im a little scared of selinux (I was thinkering too much with fedora) but better with it than without.
Yup, SELinux is definitely a double-edged sword in that it’s very powerful but can therefore be a bit more restrictive. Though, currently it’s our only bet when it comes to confining containers as it’s (vastly) superior over AppArmor in that aspect. Which explains openSUSE’s recent conversion from AppArmor to SELinux for their distros that rely heavily on container workflows; like MicroOS, Aeon, Kalpa etc. Unfortunately it’s not the easiest to understand, but I’m sure you’ll manage 😉!