TODOs Nsenter the root mount namespace to set up the /dev/ and /lib/modules bind mounts (so we can hide this complexity from the user).