After a cleanup broke my WinBoat installation, I brought the same Windows 11 VM back with a single rootless podman run against the old storage directory. Here is what dockurr/windows actually is, what lives in its storage folder, why NETWORK=nat quietly became passt in rootless Podman, how I verified RDP without opening a window, and a Quadlet unit to keep it around.