fine. cgroups, pivot_root, whatever. this is a solved problem.