@pid_eins @ariadne @leftpaddotpy @dysfun I mean ultimately if it runs in containers I guess the answer has to be yes - you containerize the whole system to the extent systemd thinks it's in a container and leaves that stuff alone.
But what I'm asking is if there's a non-hack way to just say "please leave my /dev alone".