Summary

Add an option to attach containers to a bridge configured under interfaces bridge, using Netavark unmanaged mode.

Suggested CLI (name open for discussion):

set container network services bridge-interface br0

Existing managed networks would remain the default. Removing a container network must leave the native bridge intact, and configuration validation must prevent incompatible settings or removal of a bridge still in use.

Use case

VyOS would manage the bridge, addresses, firewall zones, routing and NAT. Podman would attach the containers without adding its own NAT or port-forwarding rules. This lets routed traffic keep the original container source address.