My systemd-networking/firewalld experimenting in a VM now working nicely on the real machine; all that pretty much just worked - especially after I added a missing 'ConfigureWithoutCarrier=on' I'd made a note to do and then forgotten. The main gotcha was the #debian I'd debootsrapped not having the firmware files for the NIC that my internet connection went through.
I then t…