@cwebber it's very nice if the system allows unprivileged namespaces. the bundles are huge but it "just works" (sans that one big caveat)