How does one provide one or two devices, e.g. /dev/null for a chroot environment? Device nodes created by mknod do not work. mount_devfs creates an entire device tree, negating the security of the chroot.