chiark / gitweb /
nspawn: make /dev/kmsg unavailable in the container, but allow access to /proc/kmsg