* move CNI install/podman config to build-time * move DNS config to userdata * consolidate apt updates for performance