root filesystem will already be read-write