chiark / gitweb /
nspawn: mount a new /proc instance in the container so that we don't see the hosts...