the script must be run as root