a2374ca679
The shared-parent oneshot never ran before pve-guests (WantedBy=multi-user wasn't pulled into the boot transaction), so on a host reboot the guest bound a not-yet-shared parent -> private -> propagation broken. Now WantedBy=pve-guests (pve-guests pulls it in + Before= orders it first); EnsureSharedParent reinstalls the unit when content differs so the fix deploys. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>