Firefox in container without any vnc server, by mounting the the X11 directory to the container. It's performance are significantly higher but the volume may be a vulnerability. But then you don't have to connect it to the host network for accessing the vnc server, so this is actually even more secure.

To start the container run:

docker run -dt --gpus all -e DISPLAY=$DISPLAY -v /tmp/.X11-unix:/tmp/.X11-unix --name firefox 1nachi/firefox

or if you are using nerdctl:

nerdctl run -d --gpus all -e DISPLAY=$DISPLAY -v /tmp/.X11-unix:/tmp/.X11-unix --name firefox 1nachi/firefox

(I never tried podman, but it should be the same syntex of the docker command)