I finally got https://k0sproject.io running on this system. It was blocked on emptyDir mounts backed by NFS and resolved by backing with tmpfs.
After another deep dive, I can configure ingress with local IP addresses and hostnames. MetalLB assigns addresses from a pool set aside by my WiFi router. Hostnames are advertised by avahi-daemon. Ingress is routed by contour-envoy.
If you have a fediverse account, you can quote this note from your own instance. Search https://floss.social/users/barrbrain/statuses/115585372073984846 on your instance and quote it. (Note that quoting is not supported in Mastodon.)

