Use pivot_root instead chroot, so that containers in containers work