oranki

You need the G account to be able to install apps from Play Store, I don’t believe the private space itself requires it.

Not sure if there’s some Play “integrity check” on stock ROMs, but on GOS I was able to create the private space and download&install F-droid or other APKs just fine, without a Google account.

Maybe you get the possibility of routing all traffic from a container (or all the containers in that namespace/network) over the tailnet this way? With the host method, you’d need the host to use the exit node too.

Have you considered lowering the unprivileged port limit instead?

sudo sysctl -w net.ipv4.ip_unprivileged_port_start=53 | sudo tee -a /etc/sysctl.conf  

Then remove the firewall rule and bind to port 53.

Edit: typo