assume chroot will have leading slash