Are you running them from your user session? If so, when you log out it will stop your processes, unless you have enabled ‘linger’ mode.

You could write a script that just restarts your container, make sure unprivileged users cannot edit it, and do one of two things:

1. make a sudoers entry for your unprivileged account to call just that script as a user in the docker group with sudo
2. use setuid on the script to have it execute from the docker group even when executed by users

K8s has a mild solution to chicken and egg situations for nodes - the nodes support ‘static manifests’ which can be pods they know how to bring up before ever connecting to the API server. So you could have your wireguard peer be brought up this way. Downside is while those static manifests show up in k8s APIs, they aren’t fully manageable since they are defined by files on disk.

Wave soldering machine - they basically suspend the whole board above a vat of solder, it bonds anywhere it can. So if they don’t need that chip on this model, it’s getting solder anyway.