@creachadair Genuine path I walked today: "oh, podman takes 15 minutes to create a container because fuse-overlay is unavailable so it fell back to the old and bad vfs storage driver. Okay fixed that, but now DNS doesn't work because slirp4netns sandboxing isn't compatible with certain symlink chains and fails silently. Apparently the fix is to use pasta instead but it doesn't work with this version of podman, but I did find some sigils to paste into a config file which somehow fixes it."