fix(tests): plethora of fixes to functional tests

- remove update-ca-certificates from node start, dramatically reducing
 container spin-up time
- removing time.Sleep when spinning up a node; instead, poll until
 it looks like the container is fully booted
- cleaning up network interfaces more thoroughly between tests,
 preventing a race where one test failure will cause a cascading
 failure in subsequent tests
- copies /etc/nsswitch.conf into container to ensure users are available
 during startup (in the non-container world this is handled by initrd)