It should be easy to work out what's happening by dropping into the shell after unpacking sets, certctl, and network setup, to try out Taylor's idea about the chroot vs the "display" side of things.
It sounds like Fusion is a different network setup to qemu, as you are unable to reproduce in your testing.
I'll try dropping into the shell on a burner VM tomorrow