Vagrant + VirtualBox: DNS resolution guarantees and TLS trust boundaries for HTTPS box downloads
Integration boundary Vagrant core orchestrates provider VMs and downloads boxes over HTTPS, while the VirtualBox provider manages the guest network stack. The contract between them does not specify whether Vagrant ensures guest DNS resolution or a consistent TLS trust store for outbound HTTPS calls from either the host (box download) or the guest (provisione