Split portals into host and container

After this DNS is resolvable from the host.  This is kind of horrible,
but I can not find anything better.

We still need to plumb the cluster DNS server IP to each node's
resolv.conf
WIP: e2e