Over two years of effort, finally, paying off. In the space of a few days, largely with community contributions, we've gone from bootstrapped to a functioning container environment with sudo (pending merge today), pam, systemd and *almost* our first kernel. What a blast.