Currently unqualified rustembedded/* image names are used instead of docker.io/rustembedded/*, so I have to add

unqualified-search-registries = ["docker.io"]

to /etc/containers/registries.conf.

I am using podman, which has no default registries and discourages using unqualified names.