commands should be executed as ordinary user, note about setting the kernel cmdline