mkdir container
sudo pacstrap -C pacman.conf -c -d container/ systemd iproute2
sudo sed -i 's/dns/resolve/' container/etc/nsswitch.conf
systemctl --root container/ enable systemd-networkd systemd-resolved
ps. required on host: systemd pacstrap
sudo systemd-nspawn -D container/ -b -n
sudo pacman -Rdd --root container/ --config pacman.conf perl kbd texinfo
sudo pacman -S --root container/ --config pacman.conf iputils nettle
ps.
the container doesn't even have pacman (nor a kernel). all pacman operations can be done by the host.