chiark / gitweb /
nspawn: add file system locks for controlling access to container images