dependencies: - devfs # To expose /dev entries like tun for wireguard