debug: logfd = 2
debug
test: veth
lsm: borrow lsm from LXC