flock to avoid LXC errors in concurrent builds, plus this is a bit of a resource governor to avoid having the machine go nuts building on startup