Oh! Looks like failure is related; will need to check the test to see if the test is bad, or if we regressed;

=== Failed
=== FAIL: amd64.integration-cli TestDockerCLINetmodeSuite/TestNetHostname (0.75s)
    docker_cli_netmode_test.go:59: assertion failed: expression is false: strings.Contains(out, "invalid container format container:<name|id>")
    --- FAIL: TestDockerCLINetmodeSuite/TestNetHostname (0.75s)

Ah! So yeah, I guess the test is "correct" (but not something we clearly define). Basically the test validates that container (without a colon :) produces an error, so effectively container to be a reserved name for networks;

I can fix this validation, but we should probably look if IsContainer() and other utilities should treat the same; IsContainer() (and NetworkMode) does not have a IsValid() (I think), so it's possible there's risks that things are not considered a container mode network and then fall through to be considered "network named container" or vice-versa.