Switch to libvirt done in terms of config and so forth. Only thing in the way now is that we have no network configuration within the container. For that, we need a better init system within the container which can configure the network on the inside.

Also the router expression, which should provide the tun/tap device on the inside is untested.
Oopsy.