devnodes
mount: rdonly and private
don't send signal