b42073c48e
A container joined only to an intern network gets no default route (network_join.cpp), so pinging a real outside address (8.8.8.8) must fail outright, not merely succeed slower than an extern join would. Verified end-to-end as root: both variants correctly report "Network unreachable" and the tests assert a RESULT= line was seen (the command actually ran) that isn't RESULT=0.