nixos-container destroy: Make idempotent
Containers: Set up /etc/resolv.conf

Systemd-nspawn is supposed to do this, but doesn't if any of the
--network-* flags are used.