Add OCI container VM

nixos/modules/tmproot.nix

@@ -129,6 +129,8 @@ in
           "/root/.nix-defexpr"
 
           "/var/lib/logrotate.status"
+
+          "/etc/cni/net.d/cni.lock"
         ];
         persistence.config = {
           # In impermanence the key in `environment.persistence.*` (aka name passed the attrsOf submodule) sets the
@@ -326,6 +328,15 @@ in
           }
         ];
       })
+      (mkIf config.virtualisation.podman.enable {
+        my.tmproot.persistence.config.directories = [
+          {
+            directory = "/var/cache/containers";
+            mode = "750";
+          }
+          "/var/lib/cni"
+        ];
+      })
       (mkIf config.my.build.isDevVM {
         fileSystems = mkVMOverride {
           # Hijack the "root" device for persistence in the VM