- unprivileged creation of rootfs using guestfish - allows full control over network, installed packages - merged test.sh into coverage.sh