so, after digging further, I found out, it is a upstream issue. something with 1.16 broke it seems (I tested ubuntu and leap, which sadly are still on 1.15 and 1.14) that's why I thought it was a debian issue.
the bugreport is on github is here: https://github.com/containers/buildah/issues/2876
