Start determining which code in Podman needs to implement TLS control. Then vendor the updated container-libs and Buildah into Podman, provide a proof of concept (including the Buildah CLI integration), and start a discussion with Podman maintainers.

Scope

• Start listing TLS control changes in Podman proper
• Vendor container-libs and WIP Buildah changes with TLS 1.3/ML-KEM support
• Prototype implementing the Podman changes
• Prototype CLI integration with Buildah

Dependencies

• Depends on RUN-4080 (container libs TLS changes)