Merge container logic into start.sh

This whole container thinking is over-engineered and we will get to
it if and when we need to.

setup/start/systemd/iptables-restore.service

@@ -0,0 +1,11 @@
+[Unit]
+Description=IPTables Restore
+Before=docker.service
+
+[Service]
+Type=oneshot
+ExecStart=/sbin/iptables-restore /etc/iptables/rules.v4
+RemainAfterExit=yes
+
+[Install]
+WantedBy=multi-user.target