ufw commands should be run inside chroot